When you create a new NAT policy you must, at minimum, give it a
unique name. Although you are not required to identify policy targets at policy
creation time, you must perform this step before you can deploy the policy. If
you apply a NAT policy with no rules to a device, the system removes all NAT
rules from that device.
In a multidomain deployment, the system displays policies created in the current domain, which you can edit. It also displays
policies created in ancestor domains, which you cannot edit. To view and edit policies created in a lower domain, switch to
Administrators in ancestor domains can target NAT policies to devices in descendant domains, which descendant domains can
use or replace with customized local policies. If a NAT policy targets devices in different descendant domains, administrators
in the descendant domains can view information about target devices belonging to their domain only.
Deploy configuration changes; see Deploy Configuration Changes.