Destination NAT and full NAT?

[horinius]

Hi. Right now I' m editting a firewall policy for " wan -> dmz" , and I don' t understand the NAT option. The manual writes this: " If you select a virtual IP as the Destination Address, but do not select the NAT option, the unit performs destination NAT (DNAT) rather than full NAT. Source NAT (SNAT) is not performed." What is " destination NAT" ? What is " full NAT" ? " destination NAT" means " port forwarding" ? And " full NAT" means " 1 to 1 NAT" ? Thanks in advance

[jmac]

Destination NAT means the FortiGate changes the destination IP from the IP supplied in the original request to the translated IP of the VIP destination, but passed the source IP without change. Full NAT would also change the source IP to the address assigned to the FortiGate interface used for the destination route.

[horinius]

Thanks a lot :)