| Home Prev |  cOS Stream 4.00.03 Administration Guide
|
Next |
|---|
SAT can deal with IP based protocols that allow address translation to take place. However, there are protocols that can only be translated in special cases, and some protocols that cannot be translated at all.
Protocols that cannot be translated using SAT usually cannot be translated using NAT. The reasons for this can include:
The protocol cryptographically requires that IP addresses are unaltered. This applies to many VPN protocols.
The protocol embeds IP addresses inside TCP or UDP level data and requires that the addresses visible at the IP level are the same as those embedded in the data.
Either party is attempting to open new dynamic flows to the addresses that are visible to that party. In some cases, this can be resolved by modifying the application or the configuration.
There is no definitive list of protocols that cannot be translated. A rule of thumb is that VPN protocols that open secondary flows in addition to the initial flow can be difficult to translate.
