Forum Discussion

adelossantos_16's avatar
adelossantos_16
Icon for Nimbostratus rankNimbostratus
Dec 06, 2011

SNAT = Secure NAt or SNAT = Source NAT ????

According to this F5 document:     http://support.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/ltm_configuration_guide_10_0_0/ltm_snat.html1203505     States that:   secure netw...
config
design
Hamish's avatar
Hamish
Icon for Cirrocumulus rankCirrocumulus
Dec 06, 2011
IMO... I agree with the second F5 doc referenced above... Its Source NAT... Because there is nothing secure about NAT... Even if it's implemented securely, NAT does NOT imply security. And NAT'ing does not improve security.

 

 

Utilising NAT instead of a traditional packet filter doesn't make it any more secure. NAT is for where you run out of real addresses... Nothing more. Nothing less. Roll on IPv6

 

 

H