How To Create a No NAT Policy

Details

No NAT rules are configured (at Policies > NAT) by specifying the desired match conditions (zone, IP, etc.) and leaving the source translation and destination translation fields blank.

It is also possible to specify a list of IP addresses or IP address ranges in a NAT rule. If No NAT rules were used in the past to  exclude specific IP addresses from a range or subnet defined in another NAT rule, simply define ranges around the excluded address(es). In the following example NAT rule, 1.1.1.1 - 1.1.1.40 and 1.1.1.50 - 1.1.1.254 are excluded.

Note: The above No NAT policy should be placed at the appropriate position to ensure it is processed first before any other NAT policy. NAT rules are processed top to bottom.

See Also

Understanding PAN-OS NAT

owner: panagent