The Best Damn Firewall Book Period, 2nd Edition

Chapter 26. Address Translation

Solutions in this chapter:

• Purpose of Address Translation

• NetScreen NAT Overview

• NetScreen Packet Flow

• Source NAT

• Destination NAT

Summary

Introduction

NetScreen is well known for its firewall and virtual private network (VPN) technologies primarily due to the Application-Specific Integrated Circuit (ASIC)-based design of most of their core features, including address translation. This chapter focuses on how the address translation features of NetScreen products have evolved from a simple physical interface translation (Screen OS 2.5 and below) to a solution capable of handling complex address translation design requirements. ...