McAfee SG310 Administration Manual page 181

Firewall menu options
NAT
From the Firewall menu, click NAT > Source NAT tab.
1
If this is the first rule, click New. Otherwise, click the add above or below icon to add the rule in the
2
location you want above or below an already defined rule. The Modify Source NAT page appears
(Figure 186).
Figure 186 Modify Source NAT page — Predefined Services view
[Optional] Enter a name for the rule in the Descriptive Name field.
3
Leave the Enable checkbox selected. To temporarily disable the rule, clear the checkbox.
4
Select the interface that the packet masquerades behind from the Outgoing Interface list. This matches
5
the network interface on which the appliances transmits the packet. In addition to individual interfaces
and interface groups you have defined, you can select the option Any to match packets that will be
transmitted on any interface. You should normally set this field to your Internet interface.
Enter the address from which the request originated in the Source Address field. Typically, this is an IP
6
address on an internal machine. Can be an IP address range of the following forms:
• a.b.c.d
• a.b.c.d-e
• a.b.c.d-e.f.g.h
• a.b.c.d/e
• a.b.c.d/e.f.g.h
• a.b.c.d+e
Enter the destination address of the request in the Destination Address field. This matches the
7
destination IP address of the packet. Use this to restrict which destinations you want to use the source
NAT for. The field allows the same forms as the prior step.
Enter the destination service port or ports of the request in the Services field. This matches the service
8
of the packet, which may be a TCP or UDP destination port, an IP protocol, or an ICMP message type. This
field allows you to use a predefined service. Or, click New to create a service definition when you create
this rule (Figure 187).
McAfee UTM Firewall 4.0.4 Administration Guide 181