Personal aXsGUARD - 7.7.1
Chapter 3. Features and Concepts
© VASCO Data Security 2013
9
With the option enabled (see
Section 4.6, “Network Settings”
), hosts in the NAT’d network connected to the
PAX’s WAN interface can connect seamlessly to machines in the PAX’s LAN, as if they were a part of the
same network segment. In this case, packets leaving the PAX’s WAN interface are not masqueraded. In short,
this option allows traffic from the NAT’d WAN to traverse the PAX’s firewall, while incoming Internet traffic
remains blocked.
Figure 3.3. WAN to LAN Option in NAT Environment
3.4.4. SNAT and Masquerading
Source Network Address Translation (SNAT) is a NAT type used to change the source IP address of packets.
Masquerading is a NAT type which is used to change a packet’s source IP address. For all new connections,
the source IP address is looked up, based on the outgoing interface of the packet, and subsequently altered
(masqueraded). Reply packets are automatically "demasqueraded" and returned to the original source IP
addresses.
