hello,

outside accessing inside server then it should be

1.1.1.1 = remote host ip address

2.2.2.2 = published ip address

3.3.3.3 = LAN server ip address

static (inside,outside) 2.2.2.2 3.3.3.3 netmask 255.255.255.255

access-list outside_inside permit ip host 1.1.1.1 2.2.2.2

and not static (outside,inside) unless you are planning you change the soure address also

please correct me if i am wrong nonat is used when you want IPSEC traffic to pass through or you don't want any translation to happen on the ip addresses. e.g. VPN tunnels.

HTH, please rate it