Is ATP/FLEX Firewall Supported SNAT a Specific IP Address for an Internal PC in Nebula Mode?

Zyxel_Stanley

Question:
Does Nebula support assigning a specific external IP address (non-WAN IP) for an internal PC’s outbound traffic?

Answer:
Nebula currently does not support assigning a specific outgoing IP address for an internal PC when operating in Nebula mode.

If this functionality is required, the recommended approach is to switch the firewall to On-Premise mode, where Policy Route can be used to define a specific outgoing interface IP for selected internal devices.

To configure this in On-Premise mode:
(1) Go to Configuration > Network > Routing > Policy Route > Create a new policy route.
(2) Set the internal PC’s IP address in the Source field, select the desired WAN interface under Outgoing Interface (e.g., WAN2), Assign the required external IP address as SANT IP field.