A network security engineer has a requirement to allow an external server to access an internal web server. The internal web server must also initiate connections with the external server.
What can be done to simplify the NAT policy?
A . Configure ECMP to handle matching NAT traffic
B . Configure a NAT Policy rule with Dynamic IP and Port
C . Create a new Source NAT Policy rule that matches the existing traffic and enable the Bi-directional option
D . Create a new Destination NAT Policy rule that matches the existing traffic and enable the Bi-directional option
Answer: C
Explanation:
https://www.paloaltonetworks.com/documentation/70/pan-os/pan-os/networking/nat-
configuration-examples