Implementing a multi-regional cloud based network using network address translation

A computer implemented method of applying address translation to network traffic originating from client devices having dynamic Internet Protocol (IP) addresses to support IP based security measures, comprising:

• using a gateway configured to connect a plurality of client devices used by a plurality of users to a plurality of cloud based networks, the gateway is used for:
• receiving credentials identifying a respective user using a respective client device of said plurality of client devices, wherein said respective client device is assigned a dynamic IP address;
• accessing a translation record mapping each of the plurality of users to a respective unique static IP addresses, based on an identity of said each of the plurality of users, defined by respective credentials of said each of the plurality of users;
• retreiving from said translation record the static IP address of the respective user, according to the received credentials;
• adjusting a source address of each packet received from the respective client device by replacing the dynamic IP address of said respective client device with the static IP address retrieved from said translation record;
• and
• forwarding each adjusted packet to a security engine configured to apply at least one security policy to the respective adjusted packet before transmitting the respective packet to at least one of the plurality of cloud based networks, wherein the at least one security policy is applied according to the static IP address mapped to the respective user.

A computer program product comprising a non-transitory computer readable storage medium storing program code thereon for execution by at least one hardware processor, said program code comprising:

• program instructions to receive credentials identifying a respective user using a respective client device of said plurality of client devices, wherein said respective client device is assigned a dynamic IP address;
• program instructions to access a translation record mapping each of the plurality of users to a respective unique static IP addresses, based on an identity of said each of the plurality of users, defined by respective credentials of said each of the plurality of users;
• program instructions to retrieve from said translation record the static IP address of the respective user, according to the received credentials;
• program instructions to adjust a source address of each packet received from the respective client device by replacing the dynamic IP address of said respective client device with the static IP address retrieved from said translation record;
• and
• program instructions to forward each adjusted packet to a security engine configured to apply at least one security policy to the respective adjusted packet before transmitting the respective packet to at least one of the plurality of cloud based networks, wherein the at least one security policy is applied according to the static IP address mapped to the respective user.