# Add NAT rules

NAT rules define how NAT is applied to matching connections.

## Before you begin

You must have a custom Policy element and permissions to edit it.

##

NAT rules are only available in Engine Policy elements. NAT is not supported for layer 2 physical interfaces on Security Engines in the Engine/VPN role role.

For more details about the product and how to configure features, click Help or press F1.

## Steps

1. Add the NAT rule in one of the following ways:
   - Right-click the ID cell of an existing NAT rule and select Add Rule Before or Add Rule After.
   - Copy and paste an existing NAT rule.
   - Copy and paste an Access rule to match the rule to the same Source, Destination, and Service.
2. Specify the portion of the traffic to which you want to apply NAT.
3. Define the translation you want to apply.