Checkpoint fw NAT question

[charleskoh04]

Thanks n0cmonkey for your comment.

Hi got another checkpoint question.

If in the NAT address translation tab,

Notice that there are two types, one grp is the one you create manually on the tab itself, which is the grey color grp.

The other is you created in the object itself,automatic translation, which will belong to the yellow grp in the address tab.

My question is , if there are 2 dests sharing the same translated address, which will take priorty ? The one in the grey color grp or the one in the yellow color grp ?

Thanks.

 

[Sunner]

Not sure I understand the question...

If you mean you have a "general" rule, for example a hide rule, the usual "First hit goes" applies, that is, if you have a specific rule earlier in the rulebase, it'll apply if it matches, if it doesn't, it'll traverse down to the hide rule.