SHOW NAT command on ASA 5520 8.2(5)

[Ge Qu]

Hey,

When I do a SHOW NAT command on my 5520 firewall, i got the following results:

match tcp inside host x.x.x.x eq 123 outside any
    static translation to y.y.y.y/123
    translate_hits = 0, untranslate_hits = 105

I would like to know what is translate_hits and untranslate_hits. what's the difference between them. Doesn't this mean that the NAT is not working with untranslate_hits = 105?

Thank you

[Flavio Miranda · Accepted solution]

Hello,

Not necessaily is a problem. Translate_hits and untranslate_hits  is about the direction of the connection.

 For example, a server outside your network initiates the connection to a server inside your network, in this case, untranslate_hists count will increase and Translate_hists will remain the same.

[Ge Qu]

Thank you Flavio.

[Flavio Miranda]

You´re welcome. Thanks for rating.