set security nat destination pool A address 192.168.1.9/32 set security nat destination rule-set des-nat from zone untrust set security nat destination rule-set des-nat rule WEb match destination-address x.x.x.x/32 set security nat destination rule-set des-nat rule WEb then destination-nat pool A
