NAT support on HP-UX 11.11

[Kannan Narasimhan]

I'm looking for software packages with support that enable NAT on HP-UX 11.11. I found that IPFilter/9000 doesn't do NAT. Any HP supported packages out there that I can use? My other option is to look at IPFilter 4.0 Alpha18 from http://cheops.anu.edu.au/~avalon/ipf-mentat.html - but support may be an issue. Is there a plan for IPF 4.0 to be ported to IPFilter/9000?

Thanx!
Kannan

[Brian Hackley]

Kannan,

Unfortunately, we're not supposed to give out information on unannounced product futures here on the HP Forums, just as we don't in the HP Response Center.

However, what I do know is the following: the port of IPFilter to HPUX does include the NAT functionality, but NAT is not supported.
The IPFilter/9000 Release note tells you this: "The software includes all the functionality found in the public domain code including the unsupported perimeter firewall features, such as NAT and firewall stealth (fastroute). If you are using features that are not supported by Hewlett-Packard, you may request support from the public domain IPFilter website. The URL for this site is: http://caligula.anu.edu.au/~avalon and the URL for the IPFilter mailing list archive is http://false.net/ipfilter/ "

Since I have worked with some customers experiencing serious issues in the NAT module, I'd suggest being careful about using it in a production environment, and have other perimeter firewalls handle NAT for you.

Hope this helps a little,

-> Brian Hackley

[Kannan Narasimhan]

Brian,

Thanx for ur response! Even though the IPFilter/9000 release note claims that NAT may be supported, I basically found that NAT commands like 'map' lead to syntax errors!

Thanx for pointing to me the stability issues - that will be big concern for us!

Are their any packages other than IPFilter for NAT support?

Thanx!
Kannan