Cisco Firepower Threat Defense (FTD)

Chapter 22Masquerading the Original IP Address of an Internal Network Host

Any external user, whether an attacker or a legitimate Internet user, should have no visibility into your internal network. You can hide the internal addresses of your network by masquerading them into public addresses. However, assigning a dedicated public address to each of the internal hosts is not a feasible option. You can meet this challenge by enabling the Network Address Translation (NAT) functionality on an FTD device. This chapter demonstrates how to configure NAT and how NAT can masquerade an internal IP address as a public IP address.

Note

In this chapter, the terms translation and masquerading refer to the same operation and are interchangeable. In other ...