Use Case 3: Configure DNAT on Azure HA Firewall

This use case shows an example of Destination Network Address Translation (DNAT). The DNAT policy remaps traffic from the Internet that is sent to the floating IP address (interface IP) 192.168.1.254 to a specific machine (192.168.2.200) on the LAN. The following figures show the example before and after an HA failover.

The floating IP address always stays on the Active firewall

After the HA failover