PaloAlto Hands-on || LAB-14 || PaloAlto NAT || Source NAT- DIP (Dynamic IP)

Dynamic IP-Allows the one-to-one, dynamic translation of a source IP address only (no port number) to the next available address in the NAT address pool. The size of the NAT pool should be equal to the number of internal hosts that require address translations. By default, if the source address pool is larger than the NAT address pool and eventually all of the NAT addresses are allocated, new connections that need address translation are dropped. To override this default behavior, use Advanced (Dynamic IP/Port Fallback) to enable use of DIPP addresses when necessary. In either event, as sessions terminate and the addresses in the pool become available, they can be allocated to translate new connections.
#paloaltofirewall #pcnse #ngfw #ccna #firewall #cybersecurity