Nat/Static Nat confusion

Unanswered Question
Mar 6th, 2007
User Badges:


One of our sites have an ISA server behind ASA5520 7.2(2). It is being used as a proxy server as well as email. All its interfaces use private IPs and all internal clients access http through this Server.

In order to allow internal clients to browse the internet, will a Static (inside, Outside) command suffice or I should add a global command defining the public IP that corresponds to the ISA external NIC (connected to ASA inside) and a NAT(inside) statement as well?


static(ISA external, Public IP1) ....

or add

global (Outside) 1 Public IP1

nat(inside) 1 ISA external

Is this a redundant configuration?

As for email access I have created the required static (inside, Outside) command and access-list

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 4 (1 ratings)
Jon Marshall Wed, 03/07/2007 - 00:21
User Badges:
  • Super Blue, 32500 points or more
  • Hall of Fame,

    Founding Member

  • Cisco Designated VIP,

    2017 LAN, WAN


If you already have a static setup for your ISA server due to your e-mail requirements then you do not need to do anything else on the ASA device for internet access as long as all access to the internet goes via the ISA server and there are no direct connections from internal clients to the Internet.




This Discussion