Help Center/ Cloud Firewall/ Best Practices/ Configuring a Protection Rule to Protect SNAT Traffic/ Configuring a NAT Protection Rule
Updated on 2024-09-23 GMT+08:00
View PDF
Share

Configuring a NAT Protection Rule

After verifying the traffic flow, configure protection rules so that the CFW can allow or block traffic accordingly.

Procedure

  1. Log in to the management console.
  2. Click in the upper left corner of the management console and select a region or project.
  3. In the navigation pane on the left, click and choose Security & Compliance > Cloud Firewall. The Dashboard page will be displayed.
  4. (Optional) Switch firewall instance: Select a firewall from the drop-down list in the upper left corner of the page.
  5. In the navigation pane, choose Access Control > Access Policies.
  6. On the Internet Boundaries tab, click Add Rule. In the Add Rule dialog box, configure the following parameters:

    • Rule Type: NAT
    • Direction: SNAT
    • Source: Select IP address. Enter a private IP address.
    • Destination: Select IP address (and enter a public IP address) or Domain name/Domain name group.
    • Application: Any

  7. Click OK.