[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [FW1] RE: NAT - Manual or Auto??
Speaking for myself, I like to know exactly what is going on when I setup NAT rules. It makes me think about what I'm putting in my rulebase(s) and keeps me aware of what is going on behind the scenes. In the past I DID setup some automatice NAT rules and later, when I removed the objects, got bit when I tried to recreate them using manual NAT rules (had to tweak a file or two by hand to completely remove the auto. NAT stuff...mind, this was in version 3.0b..haven't tried auto. rules since). Auto NAT rules take a higher priority than manual NAT rules (I think that you can't add manual rules BEFORE any auto. rules) and you can't actually view an object in an automatic NAT rule by double clicking on it so if you need to make a change it's slightly more time consuming. I think, in many ways, it's a personal preference. In some cases you CAN'T setup auto. rules; you must use manual rules. My thought is if auto. rules were foolproof then they would make it such that you could somehow setup the NAT rules completely as auto-rules. Kevin Martin Bank of America -----Original Message----- From: Jean-Pierre Harvey [mailto:[email protected]] Sent: Sunday, May 27, 2001 6:36 PM To: [email protected] Subject: NAT - Manual or Auto?? Hi all, Over a period of time I have seen several posts claiming that NAT is better set up manually in FW-1 rather than using the auto NAT features. I also have not seen anyone defend the auto NATing. So why is manual NAT so much better? Or, why is the automatic NATing not as good? Regards JP ============================================================================ ==== To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ============================================================================ ==== ================================================================================ To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================================================
|