Which translated port number should be used when configuring a NAT rule for a transparent proxy?

The correct answer is C. 8080. When configuring a destination NAT rule to redirect traffic to a transparent web proxy on a Palo Alto firewall, the translated (destination) port must be 8080. The proxy service listens on port 8080 internally. The NAT rule intercepts standard HTTP traffic on port 80 and HTTPS…

Submitted by hassan_iq· Apr 18, 2026Deploy and Configure

Question

Options

A80
B443
C8080
D4443

How the community answered

(61 responses)

A
2% (1)
B
2% (1)
C
93% (57)
D
3% (2)

Explanation

When configuring a destination NAT rule to redirect traffic to a transparent web proxy on a Palo Alto firewall, the translated (destination) port must be 8080. The proxy service listens on port 8080 internally. The NAT rule intercepts standard HTTP traffic on port 80 and HTTPS traffic on port 443 and redirects it to port 8080 on the firewall's proxy listener. Ports 80 and 443 are the original client-facing ports and are the source of the redirect, not the destination. Port 4443 is not the standard transparent proxy listener port.

Topics

#NAT#Transparent Proxy#Port Number#Proxy Configuration

Community Discussion

No community discussion yet for this question.

Full PCNSE Practice