I believe all firewalls have NAT traversal service built in I had my best experience with Netscreen SSG/ISG long time ago but got disappointed when Juniper change them to SRX. I also thought Cisco ASA was also one of the most reliable firewall since I have one that running…