Technically, with NAT you don't even have a route to the internal stuff. While with the pure firewall approach there is a route. In practice, yeah, not much of

Technically, with NAT you don't even have a route to the internal stuff. While with the pure firewall approach there is a route. In practice, yeah, not much of a difference.