The order is Rule Match, then NAT. I do know, however, that the order
changes for ROUTING depending on whether you're doing a static or
hide-mode-NAT. I can't remember off hand, but one of them is
MATCH-NAT-ROUTE and the other is MATCH-ROUTE-NAT. But MATCH is always first.
Jason
http://www.wittys.com
http://www.securitystats.com
At 08:11 PM 6/12/00 -0700, Cisco Wave wrote:
>
>Dear All,
>
>Is the NAT done first, or are the rules done first ?
>Is it possible to change the order ? Like having NAT
>done firts and then the rules checked with the new
>translated addresses ?
>
>Thank you,
>
>
>
>
>=====
>We are NOT Cisco Inc.
>
>__________________________________________________
>Do You Yahoo!?
>Yahoo! Photos -- now, 100 FREE prints!
>http://photos.yahoo.com
>
>
>===========================================================================
=====
> To unsubscribe from this mailing list, please see the instructions at
> http://www.checkpoint.com/services/mailing.html
>===========================================================================
=====
>
>
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================
