IPO Firewall Static NAT

[OldAndKnackered]

As the advice was always let your firewall do firewall stuff don't use the IPO, I've never really bothered with the firewall tab. I happened to look in there whilst bored the other day, and found this new sub-tab for Static Nat. Has anyone used it?, was it any good, or should I still leave well alone?

 

[hairlessupportmonkey]

never tried it. if you really want your IPO to be a router / firewall....

ACSS - SME
General Geek

 

[hairlessupportmonkey]

The Static NAT table allows the firewall to perform address translation between selected internal and external IP addresses. Up to 64 internal and external IP address pairs can be added to the Static NAT section of a Firewall Profile.

This feature is intended for incoming maintenance access using applications such as PC-Anywhere, Manager and the Voicemail Pro Client. The address translation is used for destinations such a Voicemail Pro server or the system's own LAN1 address.

· If there are any records in the Static NAT settings of a Firewall Profile, each packet attempting to pass through the firewall must match one of the static NAT pairs or else the packet will be dropped.

· The destination address of incoming packets is checked for a matching External IP Address. If a match is found, the target destination address is changed to the corresponding Internal IP Address.

· The source address of outgoing packets is checked for a matching Internal IP Address. If a match is found, the source address is changed to the corresponding External IP Address.

· Even when a static NAT address match occurs, the other settings on the Firewall Profile Standard and Custom tabs are still applied and may block the packet.


ACSS - SME
General Geek

 

[OldAndKnackered]

Maybe the next time I'm doing an install with SIP, I'll put something in there to see what happens.

Cheers HSM