5 DNAT and Virtual IP addresses with Central NAT

[@dizelasoftwaresolutions2037]

Hey Devin, thank you for this series. You made it easy to learn !!! I am newbee to Fortinet, your vids helped me a lot. I wish I hadnt wasted my money on buying a course on Udemy which was mediocre , and shouldve started my search on youtube first! So dope ! Thanks a mill. All the way from South Africa

[@crawfs42]

Hey, found this video while looking at documentation for DNAT rules on the fortigate device, it's probably best not to advise people to create an "ANY/ANY" ACEPT rule for inbound requests on the firewall just as far as best practices go. You could argue it doesn't matter too much because your NAT rules will simply drop packets for things that don't exist but we shouldn't be rely on our NAT rules for security, particular if you want to regularly audit your firewall rules you need to be able to define clearly what each rule does.

[@tusharnaik4710]

Hope u recover ur voice early...nice video.... we are waiting for fortimanager videos.... thanks in advance

[@ChrisAguilaracc61287]

Hi Devin, Maybe you can help me? when i try to access the DNAT inside the network it doesn't work. But when i try to access in public its running okay.

[@aries9gr]

The "all" as the destination in the policy is just the easy way. What if you wanted to put a specific address? Would it be the vip object or the internal address??

[@DevinAdams]

It would be the internal address. There is no vip objects when you're using central nat. I use the all statement just to iterate the fact that You could have multiple DNAT rules without having to specify each one on the firewall policy. Great observation though!

[@aries9gr]

@@DevinAdams Thank you Devin. I came to this video searching for this answer .. and when in saw you using "all" it was a bit of disappointment.. again thanks

[@CybowPoint]

Hi Devin.. pls can you make tutorials on FortiNac?

[@CybowPoint]

Nice videos bro