Forum Discussion
Piotr_Lewandows
Altostratus
AltostratusAFM Firewall and NAT policies - how to implement
Hi,
I need to implement policies for few hundreds src IP, dst IP SNAT and NAT combinations. Something like that, all related to 13.1.0.1:
For given dst IP:
Allow traffic from given se...
AFM NAT(CGNAT) is applied after AFM Firewall rules because it is pointless spending time processing traffic which will be dropped anyway. It seems popular to use a wildcard Virtual Server and attach an AFM policy to it containing a long set of AFM rules.
dragonflymr
Cirrostratus
CirrostratusHi,
Thanks for answer. Probably you are right, but it some cases wildcard approach do not work, especially when rules are attached to non wildcard VS.
Piotr