Trace of NAT' ing for historic use and actual session

[Yngve0]

In certain situation we need to trace NAT' ed traffic to identify the source-computer in our internal network. How can this be done easily and can this be exported to a SYSLOG-server to keep it or is this limited to the internal storage of the firewall?

[emnoc]

Hmm.. that might be hard. If you have logging enabled on the policy youc an see the src/dst and ports use.

[hklb]

You want to trace traffic on which criteria (user, source IP, dest IP, application, ..) ?