Check Point - NAT Explained

There are many types of NAT in the land of Check Point. Here's a quick overview,

  • Static NAT - One to one translation
  • Hide/Dynamic NAT - Allows you to NAT multiple IPs behind one IP/Interface
  • Automatic NAT - Quick basic address NAT translation.  
  • Manual NAT - Allows greater flexibility over automatic NAT. Proxy ARP is not automatic, so unless routed to the firewall Proxy ARPs are required.
  • Server Side NAT - destination is NAT`d by the outbound kernel
  • Client Side NAT  - destination is NAT`d by the inbound kernel

For more information on Server / Client side NAT click here