To create a new translation rule (Fig.14) you should choose the UserGate LAN adapter as a source and the WAN adapter as a destination, specify one or several services and choose users or groups which are entitled to use this rule.

Figure 14. NAT creation.

To activate the rules you need to specify a gateway: the UserGate Server and DNS server’s local IP (in TCP/IP network settings of the user workstation), because under the working with NAT the domain names permission executes locally on the user workstation. If the service required (protocol/port) is not enabled in the predefined services list, it can be added through the Firewall rule creation dialog as well as in “Services” of the Administration Console.