Firebo x II 700

[JMPKM]

HI
Does anybody have experience with this box (Watchguard Firebox II 700)
I wonder if
1.- May I define rules to control a service traffic between any two interfaces, say, may I include, in both TO and FROM windows of both tabs INCOMING and OUTGOING, any host or subnet from any interface, including the optional? Reason for this question is that I may want to control traffic between the optional and the trust interfaces, and in general between any two.
2.- May I use NAT (of any kind dynamic, static, service-based, 1-to-1) between any two interfaces (external, trusted and optional)?
3.- May I mix NAT types for the traffic between two interfaces (say, use dynamic for a range on IP's of a subnet and 1-to-1 and/or service-based for another range on the same subnet)?

Sorry for te long question but the manuals are confuse and the best answer always come from people with hands on experience.
Thanks in advance
Best Regards

 

[Ntr0P]

Yes you may define service rules between any interface. You may also mix NAT usage in the same way. You can define NAT at the service you create, but if you use 1:1 NAT, you create an exception that will bypass the NAT configuration defined at the service.

Hope that helps.