What should be configured as the destination zone on the Original Packet tab of NAT Policy rule?

A company has a web server behind a Palo Alto Networks next-generation firewall that it wants to make accessible to the public at 1.1.1.1. The company has decided to configure a destination NAT Policy rule.

Given the following zone information:

• DMZ zone: DMZ-L3

• Public zone: Untrust-L3

• Guest zone: Guest-L3

• Web server zone: Trust-L3

• Public IP address (Untrust-L3): 1.1.1.1

• Private IP address (Trust-L3): 192.168.1.50

What should be configured as the destination zone on the Original Packet tab of NAT Policy rule?
A . Untrust-L3
B . DMZ-L3
C . Guest-L3
D . Trust-L3

View Answer

Answer: A