NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[FW1] RE: NAT - Manual or Auto??



Speaking for myself, I like to know exactly what is going on when I setup
NAT rules.  It makes me think about what I'm putting in my rulebase(s) and
keeps me aware of what is going on behind the scenes.  In the past I DID
setup some automatice NAT rules and later, when I removed the objects, got
bit when I tried to recreate them using manual NAT rules (had to tweak a
file or two by hand to completely remove the auto. NAT stuff...mind, this
was in version 3.0b..haven't tried auto. rules since).  Auto NAT rules take
a higher priority than manual NAT rules (I think that you can't add manual
rules BEFORE any auto. rules) and you can't actually view an object in an
automatic NAT rule by double clicking on it so if you need to make a change
it's slightly more time consuming.  I think, in many ways, it's a personal
preference.  In some cases you CAN'T setup auto. rules; you must use manual
rules.  My thought is if auto. rules were foolproof then they would make it
such that you could somehow setup the NAT rules completely as auto-rules.  

Kevin Martin
Bank of America

-----Original Message-----
From: Jean-Pierre Harvey [mailto:[email protected]]
Sent: Sunday, May 27, 2001 6:36 PM
To: [email protected]
Subject: NAT - Manual or Auto??


Hi all,

Over a period of time I have seen several posts claiming that NAT is better
set up manually in FW-1 rather than using the auto NAT features. I also have
not seen anyone defend the auto NATing. So why is manual NAT so much better?
Or, why is the automatic NATing not as good?

Regards
JP
============================================================================
====
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
============================================================================
====


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.