Figure 1 shows an enterprise network with NAT deployed. The NetEngine 8000 Fs are deployed at the network egress and are connected to firewalls. NAT is configured on the NetEngine 8000 Fs to implement mutual access between the enterprise network and the public network. The firewalls perform only attack defense.