Cisco Cisco Firepower Management Center 4000

If a port object or object group is being used by a NAT rule, and you change or delete the object or group, 
it can cause the rule to become invalid.

You can add any of the following kinds of port conditions to a NAT rule:

individual and group port objects that you have created using the object manager

See 

 for information on creating individual and group port 

objects using the object manager.

individual port objects that you add from the Destination Ports conditions page, and can then add to 
your rule and to other existing and future rules

See 

 for more information.

literal port values, consisting of a TCP, UDP, or All (TCP and UDP) transport protocol and a port

See 

 for more information.

The following procedure explains how to add port conditions while adding or editing a NAT rule. See 

 for more detailed 

information.

Admin/Network Admin

Select the 

 tab on the rule Edit page.

The Destination Port page appears.

Optionally, click the 

 prompt above the 

 list, then type a name or 

value.

The list updates as you type to display matching conditions. See 

 for more information.

Click a condition in the 

 list. Use the Shift and Ctrl keys to select multiple conditions, or 

right-click to select all conditions. Note that you can add a maximum of 50 conditions.

Conditions you select are highlighted.

You have the following choices:

Click 

 to add the selected port to the Original Ports list.

Click 

 to add the selected port to the Translated Ports list.

Drag and drop available ports into a list.

Optionally, to create and add an individual port object click the add icon (

) above the 

 

list.

You can identify a single port or a port range in each port object that you add. You can then select objects 
you added as conditions for your rule. See 

 for more 

information.

For static rules, you can use only port objects with single ports.

Optionally, to add a literal port select an entry from the 

 drop-down list beneath the 

 

or 

 lists. 

Enter a port, then click 

. You can specify a port number from 0 through 65535. For dynamic rules, 

you can specify a single port or a range.