What needs to be configured if the NAT property `Translate destination on client side' is not enabled in Global properties?

A manual host route is not required because the Security Gateway automatically handles routing for NAT-translated addresses without administrator-added static routes.

Manually adding ARP entries via local.arp is only necessary in specific edge cases where automatic ARP is not functioning, not as a general requirement when this property is disabled.

When 'Translate destination on client side' is not enabled, the Security Gateway performs destination NAT on the server side by default and automatically manages the associated ARP and routing details without any additional administrator configuration. Check Point's automatic NAT mechanism handles these tasks transparently as part of the gateway's built-in NAT functionality.

Bi-directional NAT is an independent feature that allows two NAT rules to match a connection simultaneously and has no dependency on the 'Translate destination on client side' setting.