Welcome to ISAserver.org

NAT on firewall or router?

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> SecureNAT Client >> NAT on firewall or router?

Page: [1]

Message

<< Older Topic Newer Topic >>

NAT on firewall or router? - 16.May2006 3:12:27 PM

jagan

Posts: 3
Joined: 16.May2006
Status: offline

Hi,
Please Can anyone tell me, weather its good to have NAT policy implemented on firewall or router, and the reason.

Post #: 1

Featured Links*

RE: NAT on firewall or router? - 16.May2006 8:17:17 PM

spouseele

Posts: 12782
Joined: 1.Jun.2001
From: Belgium
Status: offline

Hi jagan,

let the router route and the firewall perform access control and NAT.

HTH,
Stefaan

(in reply to jagan)

Post #: 2

RE: NAT on firewall or router? - 17.May2006 9:48:37 AM

jagan

Posts: 3
Joined: 16.May2006
Status: offline

Hi Stefaan,
Thanks a lot for the reply. Any specific reason for implementing nat on firewall and not on router.

Regards
Jagan

(in reply to spouseele)

Post #: 3

RE: NAT on firewall or router? - 17.May2006 8:15:57 PM

spouseele

Posts: 12782
Joined: 1.Jun.2001
From: Belgium
Status: offline

Hi Jagan,

think a moment about what the primary task is for a router and a firewall. A router must determine which egress interface should be chosen as next hop and just forward the packet. A firewall should take a deep look into the packet, analyze it, reconstruct the headers, etc.. Isn't that very 'close' to what you have to do to implement NAT? So, in my opinion the firewall is the natural place to do the NAT.