Skip to main content

How to test NAT translation on Palo Alto Firewall

Similar to firewall policy test on Palo Alto, use the following command to test which NAT translation policy is matched.

 > test nat-policy-match
+ destination destination IP address
+ destination-port Destination port
+ from from
+ ha-device-id HA Active-Active device ID
+ protocol IP protocol value
+ source source IP address
+ source-port Source port
+ to to
+ to-interface Egress interface to use
| Pipe through a command
<Enter> Finish input