Port Address Translation

[ash786]

Help,

Is it possible allow many to many NATTing on Checkpoint NG AI. We are configuring machines on our LAN to see a market data site over a secure leased connection provided to us by a third party.

Instead of allocating a NAT pool of address to us, they have provided us with one address where all traffic destined for that market data service should go to. That address will be enabled for PAT so that returning traffic will know where the source is.

Is it possible to setup anything like this on Checkpoint.

Thank you.

 

[Castor66]

Will all your machines be connecting to address 1.2.3.4:1000? Or will each of those machines connect to a different port, e.g. machine 1 -> 1.2.3.4:1000, machine 2 -> 1.2.3.4:1001, etc, etc?

Either way the checkpoint will handle this through a standard NAT. Just configure everyone to Hide behind your external I/F and Checkpoint will handle the rest. It will be their problem, not yours, to do the PAT at their end.