Nat Order of Operation on PIX Firewall

[dprincipi]

Hi all.

Can anyone refer me to a document that clearly explains the NAT order of operation on a PIX Firewall w/ 6.3(3) or 6.3(5) code?

Which statements are aveluated first ? Static Nat, Static Policy NAT, Dynamic NAT/PAT, and so on, for outbound connections ?

And for inbound connections ? I know that xlate table is checked on the first place for inbound connections, but, assuming there is no entry that matches an incoming packet... What is the orden in which NAT statements are avaluated ?

Tks in advance.

Diego

[a.kiprawih · Accepted solution]

Hi,

Refer to these posts. They are the same though..

http://forum.cisco.com/eforum/servlet/NetProf?page=netprof&forum=Security&topic=Firewalling&CommCmd=MB%3Fcmd%3Dpass_through%26location%3Doutline%40%5E1%40%40.1ddb829a/0#selected_message

http://forum.cisco.com/eforum/servlet/NetProf?page=netprof&forum=Security&topic=Firewalling&CommCmd=MB%3Fcmd%3Dpass_through%26location%3Doutline%40%5E1%40%40.1ddb999a/1#selected_message

HTH

AK