Static destination translation

Destination translation is typically needed to translate new incoming connections from a server’s public IP address to the server's private IP address.

You can use static destination translation for both IP addresses and ports.

In this illustration, a host on the Internet connects to a server on the internal network.

1

The host connects to the external, public IP address.

2

The firewall translates the destination address to the private IP address of the server on the internal network.

3

The server sends its response back.

4

The firewall automatically translates the source address back to the external IP address.

You can also define static translation for whole same-size networks at once. This works in the same way as in static source translation.