| Home Prev |  cOS Stream 4.00.03 Administration Guide
|
Next |
|---|
The ability to modify the source and/or destination IP address of packets as they traverse a Clavister NetShield Firewall is known as Address Translation.
The ability to transform one IP address to another can have many benefits. Two of the most important are:
Private IP addresses can be used on a protected network where protected hosts need to have access to the public Internet. There may also be servers with private IP addresses that need to be accessible from the public Internet.
Security is increased by making it more difficult for intruders to understand the topology of the protected network. Address translation hides internal IP addresses which means that an attack coming from the "outside" is much more difficult.
Types of Translation
Two types of IP address translation are possible:Dynamic Network Address Translation (NAT).
Static Address Translation (SAT).
Both types of translation are policy-based, which means that they can be applied to specific traffic based on the source/destination and network/interface as well as based on the type of protocol (the service). Two types IP rules, NAT rules and SAT rules, are used to configure address translation.
This section describes and provides examples of configuring NAT and SAT rules.
