Network Address Translation policy analysis

Use the Network Address Translation (NAT) tab when you want to analyze NAT policies and find rules that are shadowed or redundant. NAT Policy Analyzer and Optimizer helps you identify rules that are not contributing to effective NAT behavior, understand which rule owns the conflict, and download a NAT analysis report for review.

NAT Policy Analyzer and Optimizer requirements

  • NAT Policy Analyzer and Optimizer is available only when AIOps is enabled for the tenant and for the selected data source.

  • For On-Premises Firewall Management Center, NAT Policy Analyzer and Optimizer requires Version 7.6 or later.

  • If NAT Policy Analyzer and Optimizer is disabled in AIOps settings, NAT Policy Analyzer and Optimizer operations are blocked for all data sources.

  • When AIOps is enabled for a data source, Policy Analyzer and Optimizer initiates the initial NAT synchronization and analysis for onboarded data sources.

  • NAT Policy Analyzer and Optimizer performs analysis at the management center level, not on a per-device basis.

Note

Disabled NAT rules are excluded from being analyzed by the Policy Analyzer and Optimizer.