Does CCS support agents behind a Network Address Translation (NAT) environment
Article ID: 150322
Updated On:
Products
Issue/Introduction
Control Compliance Suite (CCS)
Does CCS support agents behind a Network Address Translation (NAT) environment?
Environment
CCS 12.6.x
Resolution
Officially, CCS is not supported in a NAT-ed environment.
However, there are several cases where such a configuration may work. It all depends on what kind of NAT is being used, configured and implemented.
NAT can be configured in many ways (Full-cone NAT, (Address)-restricted-cone NAT, Port-restricted cone NAT, Symmetric NAT, etc.) so there’s no one answer for all situations. In general, you should keep the managers in the same NAT-ed segments as managers and agents need to communicate with each other without any manipulation to the packets, and if the packets are changed in any way by any firewall and/or NATing this will cause the communication between the CCS components to fail.
Because of the intricate nature of each customer's various NATing environments, and the difficulty of getting it to work correctly, CCS components in a NATed environment are not supported by Symantec CCS Technical Support.
Feedback
