SonicWall OS: Do I need "reflexive policy"?
Posted on 2012-09-08
On a SonicWall NSA220, I want all LAN users to have access to the internet.
I also want to publish several websites using 1-2-1 nat.
When I create a nat policy for a website, I can check the "reflexive" box, but do I need to?
If I don't check that box, and a web developer is remote desktop'd into the web server from the inside LAN, he or she can still do a google search (for example) from that web server and that access will go through the "all LAN users access to the internet" rule, correct?
I don't need the reflexive policy to give internet surfing capability to a web developer working directly on the web server, do I?