combined ipv4 & ipv6 policy & nat

[Charlez79]

Hi, is there a way to disable nat on ipv6 when using combined policies (ipv4 & ipv6).

There is only 1 checkbox to enable/disable nat. This implies to both ipv4 & ipv6.

For ipv6 of course you don't want nat.

Fortios is 7.4.3

thx

[AlexC-FTNT · Accepted solution]

Hi @Charlez79 ,

Thank you for your question.

Managing a policy that has separate NAT for ipv4 and off for ipv6 would prove difficult from many points of view (think of FortiManager, and commands that need to be changed/added - maybe "set nat4 enable" / "set nat6 enable"), and can easily create confusion in GUI. The better approach would be to have separate policy for ipv4 with NAT, and ipv6 without NAT. Consolidated policies are possibly used for very simple setups, for a more condensed view.