Use Case 4: Configure DNAT on Azure HA Firewall

This use case shows an example of Destination Network Address Translation (DNAT) that uses an additional floating IP address. The DNAT policy remaps traffic from the Internet that is sent to the additional floating IP address 192.168.1.253 (not the interface IP) to a specific machine (192.168.2.100) on the LAN. The following figures show the example before and after an HA failover.

The floating IP address always stays on the Active firewall

After the HA failover