Security expert NAT between SP-C and server issues

[SecExpFI]

Hello,

We seem to have some issues with connectivity after moving to NAT-based connectivity solutions after previously having no NAT between server and controller devices.

We're running SP-C controller devices and security expert is installed on a windows server in a remote location.

Mostly looking for confirmation, that security expert needs to be deployed without NAT? It seems that this would at least be required for cross-controller communication (since the devices seem to get ip information from the remote server, which in this case would be incorrect), but also the controllers appear offline when NAT is introduced. It seems that especially NAT in the direction of SP-C -> server over tcp/22000 is sensitive?

We have had some issues with our MSP/ISP that they have changed deployment configurations and introduced NAT, and would mostly just like confirmation that SP-C <-> server communications need to be deployed without NAT. I could find some KBs within the ecostruxure product family, but none that applied to SP-C specifically.