Help Center/ Cloud Firewall/ Best Practices/ Configuring a Protection Rule to Protect SNAT Traffic/ Configuring a NAT Protection Rule
Updated on 2024-12-02 GMT+08:00
View PDF
Share

Configuring a NAT Protection Rule

After verifying the traffic flow, configure protection rules so that the CFW can allow or block traffic accordingly.

Configuring a NAT Protection Rule

  1. Log in to the management console.
  2. Click in the upper left corner of the management console and select a region or project.
  3. In the navigation pane on the left, click and choose Security & Compliance > Cloud Firewall. The Dashboard page will be displayed.
  4. (Optional) Switch firewall instance: Select a firewall from the drop-down list in the upper left corner of the page.
  5. In the navigation pane, choose Access Control > Access Policies.
  6. On the Internet Boundaries tab, click Add Rule. In the Add Rule dialog box, configure key parameters as follows:

    • Rule Type: NAT
    • Direction: SNAT
    • Source: Select IP address. Enter a private IP address.
    • Destination: Select IP address (and enter a public IP address) or Domain name/Domain name group.
    • Application: Any

  7. Click OK.