I believe all firewalls have NAT traversal service built in
I had my best experience with Netscreen SSG/ISG long time ago but got disappointed when Juniper change them to SRX.
I also thought Cisco ASA was also one of the most reliable firewall since I have one that running…