The information you are about to copy is INTERNAL!
DO NOT share it with anyone outside Check Point.
Policy Based Routing rules matching NATed source address do not work
| Solution ID |
sk101562 |
| Product |
Security Gateway |
| Version |
R75.40, R75.45, R75.46, R75.47, R76, R77, R77.10, R75.40VS, R77.20, R77.30, R80.10 |
| OS |
Gaia |
| Date Created |
10-Jul-2014
|
| Last Modified |
06-Dec-2017
|
Symptoms
- Policy Based Routing rules (sk100500) matching NATed source address do not work when routing decision is based on the regular routing table.
- Rulebase has a PBR rule matching on a translated source address:
set pbr rule priority X match from TRANSLATED_IP/MASK
Cause
- Source translation always takes place on the server side, and cannot be changed to to client side (like destination translation).
- The OS routing decision is taking place before the outbound chain. Therefore the PBR rules are being matched against the original source address.
- After the routing decision has been made, the packet enters the outbound chain, where it is getting translated.
Solution
|
Note: To view this solution you need to
Sign In
.
|
