Enabling Service-Based Dynamic Nat; Configuring Service-Based Dynamic Nat - Watchguard Firebox X1000 User Manual

Enabling service-based dynamic NAT

Service-based NAT is not dependent on enabling simple
dynamic NAT. From Policy Manager:
1
Select Setup => NAT. Click Advanced.
2
Select the checkbox marked Enable Service-Based
NAT.
3
Click OK to close the Advanced NAT Settings dialog
box. Click OK to close the NAT Setup dialog box.

Configuring service-based dynamic NAT

By default, services take on whatever dynamic NAT prop-
erties you have set for simple NAT. However, you can
override this setting in the service's Properties dialog box.
You have three options:
Use Default (Simple NAT)
Disable NAT
Enable NAT
From Policy Manager:
1 Double-click the service icon. Click Outgoing.
2
Use the Choose Dynamic NAT Setup drop-down list
to select either the default (simple dynamic NAT),
disable, or enable setting. Click OK.
User Guide
Service-based NAT is not enabled for the service.
The service uses the simple dynamic NAT rules
configured in the Dynamic NAT Entries list, as
explained in "Adding simple dynamic NAT
entries" on page 104.
Disables dynamic NAT for outgoing packets using
this service. Use this setting to create service-by-
service exceptions to outgoing NAT.
Enables service-based dynamic NAT for outgoing
packets using this service regardless of how the
simple dynamic NAT settings are configured.
Using Service-Based Dynamic NAT
107