Source NAT is indeed processed before security policy lookup. The NAT process in a network typically consists of changing the source IP address of the outgoing packet before the security policies are applied. This ensures that the correct policies are enforced based on the post-NAT address.