This mode provides a VM direct access to outside networks. Network traffic does not go through any bridge. If VLAN is used in the physical network, it must be configured inside the VM in order to have the data packets tagged or untagged. The Proxmox firewall option is not available when using NAT mode.