Advantage of NAT in ASA 5510

Unanswered Question
Jul 5th, 2009

Dear All,

I configured my ASA 5510 without NAT by using the command

no nat-control

DMZ, Inside and outside interfaces are configured,

Static routes are configured for inside networks,

What is the Advantage of using NAT in ASA??

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
pieterh Mon, 07/13/2009 - 03:36

nat is used when you

- want local hosts with a private adress made reachable from the internet (private adress range is not routed on the internet).

- want to hide your local adresses for the outside world

- got a limited number of public adresses.

then you can create a pool of public adresses where multiple inside adresses can use the same outside adress

- you local adresses (say 10.1.1.0/24) are also used at a remote site you are connected to.

then your 10.1.1.0 subnet can seem like 172.168.1.0/24 to the remote side.

(remote side must also do NAT to make all work)

junshah22 Mon, 07/13/2009 - 07:04

Hi,

I am using PAT at my Router, I have one live IP for PAT,

Router is Directly connected to the Internet, PAT is configured at router

ASA is in place very next to the router,

ASA has three Interfaces configured

1- DMZ

2- Inside

3- Outside

Outside interface is connected with Router

Inside interface is connected with Core Switch

DMZ is connected with servers switch

security level for DMZ = 50

Inside = 100

Outside = 0

static routes towards inside vlan interfaces are configured on ASA

nothing else is configured,,

I am using ASA 5510 security plus

MY QUESTION IS:

---------------

how can I confirm that ASA is protecting my network from outbound threats

how can I confirm that IDS/IPS is working properly..

I configured my ASA using command line,

I dont have CSC SSM Module, but my ASA has capability of it

Please advise me, how can I configure my ASA for securing my network,

If it is protecting, how can I confirm it..

Regards,

Junaid

Actions

This Discussion