NAT Settings

NAT (Network Address Translation) is the method by which the Central Server can be made available for the managed devices to contact with. For any deployment to be carried out on the managed device, the Central Server and the respective agent installed device must be in contact, irrespective of the network residing in.

To configure NAT Settings, in the product console, navigate to Admin > Server Settings > NAT Settings, where the communication network can be selected either as a:

• LAN (Local Area Network)

To manage devices inside a LAN, follow the steps given below:

1. Select Inside a LAN to manage all the devices inside a LAN.
2. Enter the Private FQDN address.

• WAN (Wide Area Network)

To manage devices via the internet, follow the steps given below:

1. Select Via the Internet to manage devices over the internet.
2. Enter the Public FQDN address.

NAT Settings can be configured for both LAN and WAN setup depending on the business needs. To manage devices that connect via VPN, the LAN method can be selected. The NAT Settings can be secured by importing SSL certificates, such as using a third-party certificate.

NAT Settings for LAN Setup:

When the managed devices reside in a LAN, IT admin can configure the NAT with a private IP address/FQDN (Fully Qualified Domain Name), which will be used the managed devices to reach the Central Server.

The same NAT can be used by devices that connect to the business network using a VPN.

NAT Settings for WAN Setup:

To manage devices over the internet, configure the NAT Settings with a Public IP address/FQDN (Fully Qualified Domain Name), which is required by the WAN devices to contact the Central Server.

Note: It is recommended to configure NAT Settings with a FQDN rather than IP address(es), as FQDN will be used to check the integrity of the secured communication when using certificates. Also, FQDN can be easily resolved in the DNS irrespective of the nature of the IP address to be static or dynamic.

Modify your NAT Settings

NAT Settings once configured can be modified by navigating to the same page. When the NAT Settings are modified, previously managed devices will try to contact the previous FQDN/IP address, however, the devices added to Endpoint Central's scope after the modification in NAT Settings will contact the updated FQDN/IP address.

To eliminate the communication break for the previously managed devices, the former FQDN/IP address should be mapped to the newly added one.