|
|
|
|
|
|
|
|
In Proxy-Mode, web-requests are directed to iPrism's IP-address. Once profiled, outbound packets will have the iPrism IP-address as the "Source IP" address by default, therefore there is no need to "enable" NAT.
In Bridge-Mode, when NAT is enabled, the "Source-IP" address in outbound packets is changed to the iPrism IP-address. This makes all outbound requests appear to be originating at the iPrism. It allows tighter security by restricting outbound and inbound traffic to a single well-known iPrism address. If NAT is not configured, outbound packets retain the original Source-IP address.
In 4.1, NAT support is re-introduced:
If upgrading from 3.x (3.5 or 3.6) to 4.1, and NAT is in use, NAT will be enabled during the upgrade.
If performing a new installation, NAT will be disabled by default, but can be enabled if desired, see:
How do I Enable NAT for Bridge-Mode?
In 4.0, Proxy Mode and Bridge Mode NAT are not available.
In 3.x Proxy Mode and Bridge Mode perform NAT automatically. All outbound traffic from iPrism carries the iPrism IP address as the "Source-IP." This makes all outbound requests appear to be originating at the iPrism. It allows tighter security by restricting outbound and inbound traffic to a single well-known iPrism address.
