Compare source Network Address Translation (NAT) and destination NAT, including a typical use for each.

### What a good answer covers - Source NAT changes the source address and is commonly used for outbound access. - Destination NAT changes the destination address and may map a public port to a private server port. - Destination NAT is commonly used for port forwarding to a server. - NAT does not replace a security policy. ### The concept The terms source and destination describe which part of a packet's addressing is changed. With source NAT, a private device's traffic can leave using a public address. With destination NAT, traffic addressed to a public endpoint can be redirected to an internal server. A firewall must still evaluate the security rule for the traffic. ### Terms - **NAT**: Network Address Translation. A method of changing network addresses. - **DMZ**: Demilitarized Zone. A separate network for systems communicating with less-trusted networks. ### Remember Source NAT changes who traffic appears to come from; destination NAT changes where it is sent.