Configuring the order of SNAT rules

SNAT rules are applied to traffic packets in descending order, starting with the first rule at the top of the table. By default, SNAT rules are displayed in the table in the order of creation. The earlier a rule was created, the higher it is displayed in the table.

You can configure the order in which SNAT rules are applied in a firewall template or on a CPE device. When you configure the order in which SNAT rules are applied in a firewall template, that order is automatically propagated to all CPE devices that are using the template.

To configure the order in which SNAT rules are applied:

1. Edit the order in which the SNAT rules are applied in one of the following ways:
   • If you want to configure the order in which SNAT rules are applied in a firewall template, go to the SD-WAN → Firewall templates menu section, click the template and in the displayed settings area, select the NAT → SNAT tab.
   • If you want to configure the order in which SNAT rules are applied on a CPE device, go to the SD-WAN → CPE menu section, click on the device, in the displayed settings area, select the Firewall settings → NAT → SNAT tab and select the Override check box.

   A table of SNAT rules is displayed.

2. Configure the order in which SNAT rules are applied by clicking the Up and Down buttons next to it.
3. In the upper part of the settings area, click Save to save the settings of the firewall template or CPE device.