NAT-Hide

[#1]

hello, I just wanted to know if it' s possible to have a NAT-Hide feature like CheckPoint FW-1 does. That' s selecting a set of internal IP' s and NAT them with an specific external IP. I know we can do it just with an internal IP mapped to an external IP when using Virtual-IP Fortigate feature. Since we can' t map several internal IP' s to one external IP using Virtual-IP ( and we just want that for outgoing packets ),we don' t know how to deal with this subject. Thx BR

[#2]

Simply enable ' NAT' in policy and do nothing more, it is equal to Checkpoint' s hide. The FG will just use external interface IP as the source of all outgoing traffic.

[#3]

what about if I want to use an " specific" IP?

[#4]

Hi Francisco, The " Hidden-Like" NAT in Fortinet, can be reached using " IP Pools" , yo can set a range of IP Addresses for the pool (or just only one -> Start IP and End IP are the same), be careful when choosing the " interface" this must match the Destination port when you create the Firewall Policy later. If you want to Hidde via the IP Pool created a range of internal IP´s all you need is create a Address Group with this addresses. I think the IP Pool for NAT you need will´be in the same LAN Range of your destination interface right ? else this won´t work. I hope this can help you. Hugo