51Which of the following statements about central NAT are true?

IP tool references must be removed from existing firewall policies before enabling central NAT .

Central NAT can be enabled or disabled from the CLI only.

Source NAT, using central NAT, requires at least one central SNAT policy.

Destination NAT, using central NAT, requires a VIP object as the destination address in a firewall.