NAT configuration restrictions and guidelines

If fast forwarding load sharing is enabled, response packets sent or received on a different interface than request packets are NATed according to fast forwarding entries. If fast forwarding load sharing is disabled, these packets cannot be NATed. For more information about fast forwarding load sharing, see "Configuring fast forwarding."

If NAT is configured on only one output interface in a dual uplink network, do not add the two output interfaces to the same security zone. Doing so will cause traffic interruption. For more information about security zones, see Fundamental Configuration Guide.