If I turn off Nat-control, does that mean that traffic coming through my outside interface to a routable subnet on a DMZ is not subject to stateful inspection?
No it doesn't. You still need to allow the traffic with access-lists and when a connection is made from outside to the DMZ it will still get entered into the state table.
Nat and stateful inspection are 2 separate things.
No it doesn't. You still need to allow the traffic with access-lists and when a connection is made from outside to the DMZ it will still get entered into the state table.
Nat and stateful inspection are 2 separate things.
