# Engine Editor > Policies > Element-based NAT

Use this branch to add NAT definitions for element-based NAT. The NAT definition is also added to the elements that are included in the NAT configuration.

Option | Definition
--- | ---
Use Default NAT Address for Traffic from Internal Networks | Select an option to define how the Security Engine uses the default NAT address. On — The Security Engine always uses the default NAT address as the public IP address if there is not a more specific NAT definition that matches the traffic. Off — The Security Engine never uses the default NAT address as the public IP address. Automatic — The Security Engine automatically determines whether to use the default NAT address based on the routing configuration. If there are routes that use NetLinks, the Security Engine uses the default NAT address as the public IP address if there is not a more specific NAT definition that matches the traffic. When you select On or Automatic, a NAT rule is generated at the end of the IPv4 or IPv6 NAT rules in the policy.
Show Details | Opens the Default NAT Address Properties dialog box.
Add NAT Definition | Creates a NAT Definition element and opens the element properties.
Edit NAT Definition | Opens the properties of an existing NAT Definition element.
Remove NAT Definition | Removes the selected row from the table.