Layer 4 load balancing requires that the MOVEit servers point their default gateway to the load balancer to avoid any asymmetrical routing. In a single MOVEit WAF deployment this would be the interface IP address of the load balancer and in a High Availability (HA) pair configuration, this would be the shared IP address.

Note: Because all egress traffic will be sent out of the load balancer, Server NAT should be disabled globally to not interfere with required connectivity to other services. This setting should be disabled with caution.

To disable Server NAT (SNAT) globally, follow the steps below:

  1. In the main menu of the MOVEit WAF User Interface (UI), go to System Configuration > Miscellaneous Options > Network Options.

  2. Deselect the Enable Server NAT check box.