Yes. If the virtual IP address of the VRRP group is the only public IP address for the intranet, you can add the virtual IP address to the NAT address pool.
When the NAT No-PAT and triplet NAT policies are configured, do not configure the interface address of the firewall as an interface in the NAT address pool, to prevent the impacts on the access to the firewall.
If you set the interface address to the public IP address of NAT Server, you cannot manage the firewall using the interface address in web UI or Telnet mode or perform the ping detection on the firewall.
If you need to set the interface address to the public IP address of NAT Server and remotely manage the firewall over this interface, you can enable the PAT for NAT Server and configure protocols and port numbers to narrow the address and port number translation scope, thereby avoiding the impacts on the access to the firewall.
