Destination NAT explained | DNAT configuration in Palo Alto firewall

In this Palo Alto training video, i will explain Destination NAT i.e. DNAT in detail. You will learn concept of dnat firewall along with dnat rule.
Later on we will configure it on EVE-NG lab taking Palo Alto firewall. destination nat palo alto is little tough, but i will try to explain it in easy way comparing dnat vs dnat and explaining nat in palo alto.
For all the videos in this series visit

[@Neur0bit]

great explanation as always. Thank you.

[@freshdeveloper]

Thanks mate

[@chethanbn4826]

superb bro clearly expalined i understood

[@freshdeveloper]

Thank you 🙂

[@sss-bbb]

You should be Teacher

[@freshdeveloper]

Yeah, I am trying to be Thank you 😊

[@ZaniX42]

great explanation bro

[@freshdeveloper]

Thank you 😊

[@5ive762]

Nice one.

[@freshdeveloper]

Thank you! Cheers!

[@tikblang1]

let say, you have a Site-to-Site VPN, can you just replace the 'Zone' for the "untrust" zone and instead use zone 'IPSEC-VPN-A' for example and, just use the DNAT portion? This will be a Palo to Palo so I can leave the interface "tunnel" without IP and just use a VIP (floating IP). Any thougts?

[@freshdeveloper]

I think it may work as long as vip is reachable from other end ip. But need configure in lab and test.

[@cordmaritza]

Are the Security and NAT policies Pre or Post? v11.0.2 --has the security policies broken down to pre, post, and default and the NAT has pre and post. (video min 10.47)

[@freshdeveloper]

Yes they are even available on version 10. Pre rules are applicable prior to post rules.

[@selfspider7644]

Thanks for your work, if you needs latest image let me know..

[@freshdeveloper]

Sure, send it

[@tikblang1]

Could I request one from you too? I'm new to Palo Alto and want to learn stuff. If it's going to be an issue, let me know 'how' and who to ask to get at least a lab image. thanks!