NAT address translation rules are based on the source and destination addresses and ports. Similar to security policies, NAT policy rules are compared against the incoming traffic in sequence, and the first rule matching the traffic is applied.

As needed, add static routes to the local router so that traffic to all public addresses is routed to Deep Edge. You can also add static routes to the receiving interface on Deep Edge to route traffic back to the private address.