We have a Pix 515 fw with an inside and outside interface that has the following static NAT:
static (inside,outside) 10.2.2.2 192.168.2.2 netmask 255.255.255.255
We also have a NAT acl that looks like:
nat (inside) 1 access-list outbound-nat
global (outside) 1 10.2.4.4
access-list outbound-nat permit ip host 192.168.2.2 host 209.240.x.x
The outbound-nat acl is showing "hits" on it, but I'm confused as to how its translating to the address in the global statement if that same source ip address 192.168.2.2 has a Static NAT defined? I thought static NAT overruled other NATs? Why would I be seeing hits on the NAT acl?