Does CCS support agents behind a Network Address Translation (NAT) environment
search cancel

Does CCS support agents behind a Network Address Translation (NAT) environment

book

Article ID: 150322

calendar_today

Updated On:

Products

Control Compliance Suite Control Compliance Suite Standards Server

Issue/Introduction

Control Compliance Suite (CCS)

Does CCS support agents behind a Network Address Translation (NAT) environment?

Environment

CCS 12.6.x

Resolution

Officially, CCS is not supported in a NAT-ed environment.

However, there are several cases where such a configuration may work. It all depends on what kind of NAT is being used, configured and implemented. 

NAT can be configured in many ways (Full-cone NAT, (Address)-restricted-cone NAT, Port-restricted cone NAT, Symmetric NAT, etc.) so there’s no one answer for all situations.  In general, you should keep the managers in the same NAT-ed segments as managers and agents need to communicate with each other without any manipulation to the packets, and if the packets are changed in any way by any firewall and/or NATing this will cause the communication between the CCS components to fail. 

Because of the intricate nature of each customer's various NATing environments, and the difficulty of getting it to work correctly, CCS components in a NATed environment are not supported by Symantec CCS Technical Support.