Can a Check Point gateway translate both source IP address and destination IP address in a given packet?

Check Point gateways fully support dual NAT, where both the source IP address and the destination IP address of the same packet are translated in a single connection. This is typically implemented using Manual NAT rules, where separate rules handle each translation direction and are matched in sequence for the same traffic flow. This capability enables complex network designs such as overlapping address spaces or hairpin NAT scenarios.

This is incorrect because Check Point explicitly supports simultaneous source and destination NAT translation on a single packet - the capability is a documented feature of the firewall kernel.

Automatic NAT does not support dual NAT on the same packet because each object-based automatic rule handles only one direction of translation, making this restriction backwards.

While Manual NAT is the typical mechanism for dual NAT configuration, stating it works 'only' with Manual NAT is an inaccurate overgeneralization, and the core answer to the question is simply yes - the gateway supports it.