@Halil wrote: Hello Nash, but if we disable NAT Traversal we will need to set up Port-Forwarding to our Applience, true? Because I could disable NAT Traversal for the VPN Tunnels but I don´t because of this comment on the Dashboard: "Remote peers contact the security appliance using a public IP and port that you specify. Use this if your security appliance is behind another NAT and "Automatic" traversal does not work." You can disable NAT-T freely when your device is at the edge of your network, wearing the public IP on its outside/WAN interface. If you had e.g. a router between your FW and the public IP, you'd already need to forward traffic on 500/4500 from that router to your fw. Otherwise your router would deny the incoming traffic.
... View more
