Watchguard Network Security Essentials General ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
Studying Terms with verified answers ||//\\|| ||//\\|| ||//\\|| ||//\\||
How to configure logging for watchguard cloud?
||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
You must add the device(Add Device) in WatchGuard Cloud, then add the verification code
||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
(AKA configure on the Firebox). The other thing you must do is make sure to enable logging
||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
on all the policies. Though if you focus on "add the devices in WatchGuard Cloud" and
||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
"configure on the FB", then you should be good to go. ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
How does SD-WAN work? ||//\\|| ||//\\|| ||//\\||
Software-Defined WAN (SD-WAN) is a software-based routing solution that automatically ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
distributes network traffic across multiple WAN connections based on policies you define. SD- ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
WAN is embedded in the Firebox. The Firebox monitors your WAN connections, captures
||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
near real-time performance data, and uses this data to make routing decisions. For example,
||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
if a WAN connection becomes congested, the Firebox automatically sends traffic over a
||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
different WAN connection. ||//\\|| ||//\\||
SD-WAN works with different types of WAN connections, which means you can configure a ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
hybrid WAN. For example, if your Firebox has an MPLS connection and a broadband Internet
||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
connection, you can use both in an SD-WAN configuration. ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
You can use SD-WAN to increase application availability and performance, and to better
||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
utilize a hybrid WAN. For example, with SD-WAN, you can:
||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
Send high-priority, latency-sensitive traffic such as VoIP and video conferencing over higher-
||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
quality, more expensive WAN connections ||//\\|| ||//\\|| ||//\\|| ||//\\||
Send lower-priority traffic over less expensive WAN connections
||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
Specify performance thresholds so that connections fail over to a different WAN connection
||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
when performance is less than ideal ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
What is Dynamic NAT? ||//\\|| ||//\\|| ||//\\||
HIDES INTERNAL TOPOLGY OF THE NETWORK- ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
Dynamic NAT is the most frequently used type of NAT. It changes the source IP address of an ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
, outgoing connection to the public IP address of the Firebox. Outside the Firebox, you see
||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
only the external interface IP address of the Firebox on outgoing packets.
||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
Many computers can connect to the Internet from one public IP address. Dynamic NAT gives
||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
more security for internal hosts that use the Internet, because it hides the IP addresses of
||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
hosts on your network. With dynamic NAT, all connections must start from behind the
||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
Firebox. Malicious hosts cannot start connections to the computers behind the Firebox when
||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
the Firebox is configured for dynamic NAT.
||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
What is 1 to 1 NAT? ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
EVERY COMPOUTER ON AN INTERNAL NETWORK WOULD HAVE A (FAKE) EXTERNAL IP ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
ADDRESS
When you enable 1-to-1 NAT, your Firebox maps one or more private IP addresses to one or
||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
more public IP addresses. This allows you to make internal network resources like a mail
||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
server accessible on the internet. ||//\\|| ||//\\|| ||//\\|| ||//\\||
You can apply 1-to-1 NAT to one IP address, a range of addresses, or a subnet. A 1-to-1 NAT
||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
rule always has precedence over dynamic NAT.
||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
To connect to a computer located on a different interface that uses 1-to-1 NAT, you must use
||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
that computer's public (NAT base) IP address. If this is a problem, you can disable 1-to-1
||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
NAT and use static NAT. ||//\\|| ||//\\|| ||//\\|| ||//\\||
On most networks, we recommend that you configure SNAT rather than 1-to-1 NAT. The
||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
combination of SNAT and DNAT is more flexible than 1-to-1 NAT and can do everything that ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
1-to-1 NAT can do. For information about SNAT, see About SNAT. ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
What is NAT Loopback? ||//\\|| ||//\\|| ||//\\||
ALLOWS A SERVER TO BE ACCESSED BY IT'S PRIVATE OR PUBLIC. EVERY SERVER HAS A ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
PRIVATE AND PUBLIC IP, THIS ALLOWS FOR THE COMPUTER TO ACCESSS THE SERVER USING ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
ITS PUBLIC IP ADDRESS. ||//\\|| ||//\\|| ||//\\||
If you're on the LAN you could RDP locally with the private IP. Or you would be able to use
||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
the public IP address in a browser, and the firewall knows the public and the private are the
||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
same.
NAT loopback enables a user on the trusted or optional networks to connect to a public
||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
server with the public IP address or domain name of the server, if the server is on the same
||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
Studying Terms with verified answers ||//\\|| ||//\\|| ||//\\|| ||//\\||
How to configure logging for watchguard cloud?
||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
You must add the device(Add Device) in WatchGuard Cloud, then add the verification code
||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
(AKA configure on the Firebox). The other thing you must do is make sure to enable logging
||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
on all the policies. Though if you focus on "add the devices in WatchGuard Cloud" and
||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
"configure on the FB", then you should be good to go. ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
How does SD-WAN work? ||//\\|| ||//\\|| ||//\\||
Software-Defined WAN (SD-WAN) is a software-based routing solution that automatically ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
distributes network traffic across multiple WAN connections based on policies you define. SD- ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
WAN is embedded in the Firebox. The Firebox monitors your WAN connections, captures
||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
near real-time performance data, and uses this data to make routing decisions. For example,
||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
if a WAN connection becomes congested, the Firebox automatically sends traffic over a
||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
different WAN connection. ||//\\|| ||//\\||
SD-WAN works with different types of WAN connections, which means you can configure a ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
hybrid WAN. For example, if your Firebox has an MPLS connection and a broadband Internet
||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
connection, you can use both in an SD-WAN configuration. ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
You can use SD-WAN to increase application availability and performance, and to better
||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
utilize a hybrid WAN. For example, with SD-WAN, you can:
||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
Send high-priority, latency-sensitive traffic such as VoIP and video conferencing over higher-
||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
quality, more expensive WAN connections ||//\\|| ||//\\|| ||//\\|| ||//\\||
Send lower-priority traffic over less expensive WAN connections
||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
Specify performance thresholds so that connections fail over to a different WAN connection
||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
when performance is less than ideal ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
What is Dynamic NAT? ||//\\|| ||//\\|| ||//\\||
HIDES INTERNAL TOPOLGY OF THE NETWORK- ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
Dynamic NAT is the most frequently used type of NAT. It changes the source IP address of an ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
, outgoing connection to the public IP address of the Firebox. Outside the Firebox, you see
||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
only the external interface IP address of the Firebox on outgoing packets.
||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
Many computers can connect to the Internet from one public IP address. Dynamic NAT gives
||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
more security for internal hosts that use the Internet, because it hides the IP addresses of
||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
hosts on your network. With dynamic NAT, all connections must start from behind the
||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
Firebox. Malicious hosts cannot start connections to the computers behind the Firebox when
||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
the Firebox is configured for dynamic NAT.
||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
What is 1 to 1 NAT? ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
EVERY COMPOUTER ON AN INTERNAL NETWORK WOULD HAVE A (FAKE) EXTERNAL IP ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
ADDRESS
When you enable 1-to-1 NAT, your Firebox maps one or more private IP addresses to one or
||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
more public IP addresses. This allows you to make internal network resources like a mail
||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
server accessible on the internet. ||//\\|| ||//\\|| ||//\\|| ||//\\||
You can apply 1-to-1 NAT to one IP address, a range of addresses, or a subnet. A 1-to-1 NAT
||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
rule always has precedence over dynamic NAT.
||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
To connect to a computer located on a different interface that uses 1-to-1 NAT, you must use
||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
that computer's public (NAT base) IP address. If this is a problem, you can disable 1-to-1
||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
NAT and use static NAT. ||//\\|| ||//\\|| ||//\\|| ||//\\||
On most networks, we recommend that you configure SNAT rather than 1-to-1 NAT. The
||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
combination of SNAT and DNAT is more flexible than 1-to-1 NAT and can do everything that ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
1-to-1 NAT can do. For information about SNAT, see About SNAT. ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
What is NAT Loopback? ||//\\|| ||//\\|| ||//\\||
ALLOWS A SERVER TO BE ACCESSED BY IT'S PRIVATE OR PUBLIC. EVERY SERVER HAS A ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
PRIVATE AND PUBLIC IP, THIS ALLOWS FOR THE COMPUTER TO ACCESSS THE SERVER USING ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
ITS PUBLIC IP ADDRESS. ||//\\|| ||//\\|| ||//\\||
If you're on the LAN you could RDP locally with the private IP. Or you would be able to use
||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
the public IP address in a browser, and the firewall knows the public and the private are the
||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
same.
NAT loopback enables a user on the trusted or optional networks to connect to a public
||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
server with the public IP address or domain name of the server, if the server is on the same
||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
