Hi, according to checkpoint web site, both source and destination translation of packets (required by us) can be done by checking automatic rules intersection on NAT tab of global properties window of checkpoint policy editor. we are using checkpoint 4.1 and can't find the check box on NAT page. our dual translation is working for some internal subnets and not for others. can someone explain, regards, saans __________________________________________________ Do You Yahoo!? Make international calls for as low as $.04/minute with Yahoo! Messenger http://phonecard.yahoo.com/ ================================================================================ To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================================================