Entendendo Hairpin NAT no Fortigate + Configuração Passo a Passo + Dicas

Have you ever tried to access your own company's server from within your local network using the public domain (or external IP) and the connection simply failed or timed out? But when you try using your mobile 4G, it works perfectly? In this video, Matheus unravels the mystery behind this classic firewall behavior and teaches you how to configure Hairpin NAT (also known as Loopback NAT) on Fortigate. You will understand the packet flow and learn how to adjust your Virtual IP (VIP) policies and rules so that your LAN can reach the WAN interface and return to the internal server without headaches. The entire scenario and connectivity tests in this advanced Fortinet lab were executed within the EasyLab practical environment, demonstrating the power of simulating real infrastructure problems in a completely virtual way! #HairpinNAT #Fortigate #Fortinet #LoopbackNAT #Firewall #SecInfra #InformationSecurity #EasyLab #ComputerNetworks #Cybersecurity 🚀 Master Networks with EasyLab: Practice in real PNETLAB environments without needing expensive physical hardware. https://www.easylabtraining.com/?src=... 📚 Certifications and Training: Learn Fortinet and Networking from those who understand the subject. https://www.secinfra.com.br/links/?sr... 👥 SecInfra Community: Join our group and discuss hardware and security with us: https://www.secinfra.com.br/links/gru... 🔔 By purchasing through the links below, you help the channel without paying ANYTHING extra! Amazon: https://amzn.to/3TEzNJ6 Mercado Livre: https://mercadolivre.com/sec/2dLzBKE 🔔 Don't forget to like the video, share it with your friends and colleagues, and subscribe to the channel! 🔔 ⏱️ CHAPTERS: 00:00 Hairpin NAT on FortiGate: what it is and when it happens 00:52 How DNAT works and why internal access to the external IP fails 02:38 Basic Hairpin NAT configuration on FortiGate 03:04 Trick 1: Source Interface Filter blocking internal access to the VIP 03:50 Trick 2: why you need 2 rules 06:11 Trick 3: GeoIP blocking internal access — how to add a LAN network 07:26 Debug Flow and Sniffer: checking the traffic path in Hairpin NAT