Tom is troubleshooting NAT issues using fw monitor and Wireshark. He tries to initiate a
connection from the external network to a DMZ server using the public IP which the firewall
translates to the actual IP of the server. He analyzes the captured packets using Wireshark and
observes that the destination IP is being changed as required by the firewall but does not see the
packet leave the external interface. What could be the reason?

A.
The translation might be happening on the client side and the packet is being routed by the
OS back to the external interface.

B.
The translation might be happening on the server side and the packet is being routed by OS
back to the external interface.

C.
Packet is dropped by the firewall.

D.
After the translation, the packet is dropped by the Anti-Spoofing Protection.