User's Manual Part 1

Using Network Objects
Chapter 5: Managing Your Network 129
Using Network Objects
You can add individual computers or networks as network objects. This
enables you to configure various settings for the computer or network
represented by the network object.
You can configure the following settings for a network object:
• Static NAT (or One-to-One NAT)
ranges
omputer
e network to have its own Internet IP address. For example,
a Web server in your network, you can
rnet IP address.
rity rules. To allow incoming
ned Static NAT, you must create an
Allow rule. When specifying firewall rules for such hosts, use the host’s
ddress, a ternet IP address to which the internal
IP address is mapped. For further information, see Using Rules on page
Static NAT allows the mapping of Internet IP addresses or address
to hosts inside the internal network. This is useful if you want a c
in your privat
if you have both a mail server and
map each one to a separate Inte
Static NAT rules do not imply any secu
traffic to a host for which you defi
internal IP a nd not the In
154.
Note: Static NAT and Hide NAT can be used together.
Note: Safe@Of on
Protocol). Whe
a computer, th ppliance automatically replies to ARP
queries with its ow y enabling communication. As
a result, the Static NAT Internet IP addresses appear to external
sources to be real computers connected to the WAN interface.
fice appliance supports Proxy ARP (Address Resoluti
n an external source attempts to communicate with such
e Safe@Office a
n MAC address, thereb