# Course 32 - Checkpoint CCSA R80 | Episode 6: Mastering NAT Types, Priority Hierarchies, and Manual Rules

Page: https://stenobird.com/podcast/cybercode-academy-7578615/course-32-checkpoint-ccsa-r80-episode-6-mastering-nat-types-priority-hierarchies-and-manual-rules
Text version: https://stenobird.com/podcast/cybercode-academy-7578615/course-32-checkpoint-ccsa-r80-episode-6-mastering-nat-types-priority-hierarchies-and-manual-rules.md
Podcast: [CyberCode Academy](https://stenobird.com/podcast/cybercode-academy-7578615)
Published: 2026-05-06T06:00:02+00:00
Episode link: https://www.spreaker.com/episode/course-32-checkpoint-ccsa-r80-episode-6-mastering-nat-types-priority-hierarchies-and-manual-rules--71507349
Audio file: https://dts.podtrac.com/redirect.mp3/api.spreaker.com/download/episode/71507349/check_point_nat_logic_and_rule_hierarchies.mp3
Processing state: not_requested
JSON: https://stenobird.com/v1/public/podcasts/cybercode-academy-7578615/episodes/course-32-checkpoint-ccsa-r80-episode-6-mastering-nat-types-priority-hierarchies-and-manual-rules
Duration seconds: 1329

## Resource

In this lesson, you’ll learn about: advanced NAT design, rule priority, and manual translation in Check Point R801. NAT Fundamentals in Check Point R80 In Check Point R80, NAT controls how private and public networks communicate 🔹 Hide NAT (Source NAT) Many internal devices → one public IP Typically uses: Gateway’s external IP 🔹 Use Cases Internet browsing Outbound traffic 🔹 Static NAT (Destination NAT) One public IP ↔ one internal server 🔹 Use Cases Hosting: Web servers Mail servers 2. NAT + Security Policy (Critical Concept)👉 NAT does NOT allow traffic by itself🔹 Required Setup Configure NAT Create Access Control Rule → Accept traffic 🔹 Smart Behavior You can reference: Internal server object ✔️ Firewall automatically understands NAT mapping3. Auto-NAT Priority HierarchyWhen multiple NAT rules overlap, priority decides🔹 Priority Order (Top → Bottom) Host Static NAT (highest priority) Host Hide NAT Range Static NAT Range Hide NAT Network Static NAT Network Hide NAT (lowest priority) 🔹 Why This Matters Ensures: Specific servers keep dedicated IPs Prevents: Conflicts with general rules 🔹 Example Server inside network with Hide NAT Server also has Static NAT 👉 Static NAT wins (higher priority)4. Manual NAT (Advanced Control)Used when Auto NAT is not enough🔹 Capabilities Define: Source Destination Service (port/protocol) 🔹 Conditional NAT Apply NAT only when: Traffic matches specific conditions 5. Port Address Translation (PAT)🔹 Concept Multiple services → one public IP 🔹 Example Port 80 → Web server Port 25 → Mail server 👉 Same public IP, different internal targets6. Manual NAT Rule Placement Order matters in NAT rulebase 🔹 Best Practice Place: Specific rules → top General rules → bottom 👉 Ensures correct matching and behaviorKey Takeaways Hide NAT = outbound internet ac…

## Actions

- request_transcript: `POST https://stenobird.com/v1/public/podcasts/cybercode-academy-7578615/episodes/course-32-checkpoint-ccsa-r80-episode-6-mastering-nat-types-priority-hierarchies-and-manual-rules/transcription-requests` — Idempotently request low-priority transcript generation for this episode.
- read_markdown: `GET https://stenobird.com/podcast/cybercode-academy-7578615/course-32-checkpoint-ccsa-r80-episode-6-mastering-nat-types-priority-hierarchies-and-manual-rules.md` — Read the agent-friendly Markdown representation of this episode resource.

A page view does not enqueue transcription. Agents should invoke `request_transcript` explicitly when they need this episode processed.

## Transcript

Full transcripts are not published on public pages unless there is a clear rights basis.