Knowledgebase

Add NAT Print

  • 0

Through the Watchguard System Manager, we access the Policy Manager and create a new policy using the + option.

In the new window, we select the Manage Custom option:

In the next window, we select the New option.

In the next window, we will enter a name for the new policy and select Add in the Protocols section. (In this option, you can add or modify the ports as needed)

Finally, we register the port to be used, which in this case can have port types, the protocol to be used, and the port to configure.

We click OK on the port. If it's necessary to add ports, they can be added all at once; otherwise, we select OK on the New Policy Template and OK on Manage Custom Policy Templates, so that we have the Add Policy window. We then search for the created template and click on the Add Policy button.

In the final window, we will add a Name or keep the same as the template. We change the source by deleting From Any-Trusted and adding the necessary options using the Add button. It's recommended to add specific IP addresses for connection to your internal server for enhanced security.

En Choose Type puede seleccionar el tipo de excepción a agregar, puede agregar host ip, red ip, FQD desde donde se vayan a conectar y selecciona la opción OK y OK en la ventana de From

We select Add in the destination option.

In the new window, we remove Any-External and add the NAT in the Add SNAT option.

In this New window, we select Add.

We enter the name in the new window and select Add to add the involved IPs.

In the new window, select the public IP address through which connections will be made in the option labeled "IP Address or Interface." Additionally, add your private IP where the NAT will communicate. If it's necessary to manage a different internal port, you can redirect it in the designated field labeled "Set internal port to a different port" and select the port to redirect.

We select OK in the remaining 5 windows or until it shows us the firewall policies, then choose the Save option.

 

 

 


Was this answer helpful?

« Back