In the WAN test, a Site A W1 ping to the partner firewall's Internet interface should use the existing source network address translation (NAT) policy to translate the private source address to Site A's own Internet interface address.

### Why this is right The lab says the WAN ping requires the existing source NAT policy to translate the W1 private address to the student's own firewall Internet interface address. The target is the partner firewall's Internet IP address. ### The concept Source NAT changes the source address of outgoing traffic. In this test, it allows the private W1 address to be represented by the local firewall's Internet interface address. This is distinct from the VPN policies, which allow traffic between the internal networks through the tunnel. ### Terms - **NAT**: Network Address Translation. Changes network addresses in packet traffic. - **W1**: The workstation named condorID-W1 in the lab. - **WAN**: Wide Area Network. A network connecting separate sites. ### Remember The WAN reachability check uses source NAT; the later inter-LAN test uses the VPN path.