One of our sites have an ISA server behind ASA5520 7.2(2). It is being used as a proxy server as well as email. All its interfaces use private IPs and all internal clients access http through this Server.
In order to allow internal clients to browse the internet, will a Static (inside, Outside) command suffice or I should add a global command defining the public IP that corresponds to the ISA external NIC (connected to ASA inside) and a NAT(inside) statement as well?
static(ISA external, Public IP1) ....
global (Outside) 1 Public IP1
nat(inside) 1 ISA external
Is this a redundant configuration?
As for email access I have created the required static (inside, Outside) command and access-list