cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
364
Views
0
Helpful
3
Replies

Advantage of NAT in ASA 5510

junshah22
Level 1
Level 1

Dear All,

I configured my ASA 5510 without NAT by using the command

no nat-control

DMZ, Inside and outside interfaces are configured,

Static routes are configured for inside networks,

What is the Advantage of using NAT in ASA??

3 Replies 3

andrew.prince
Level 10
Level 10

pieterh
VIP
VIP

nat is used when you

- want local hosts with a private adress made reachable from the internet (private adress range is not routed on the internet).

- want to hide your local adresses for the outside world

- got a limited number of public adresses.

then you can create a pool of public adresses where multiple inside adresses can use the same outside adress

- you local adresses (say 10.1.1.0/24) are also used at a remote site you are connected to.

then your 10.1.1.0 subnet can seem like 172.168.1.0/24 to the remote side.

(remote side must also do NAT to make all work)

Hi,

I am using PAT at my Router, I have one live IP for PAT,

Router is Directly connected to the Internet, PAT is configured at router

ASA is in place very next to the router,

ASA has three Interfaces configured

1- DMZ

2- Inside

3- Outside

Outside interface is connected with Router

Inside interface is connected with Core Switch

DMZ is connected with servers switch

security level for DMZ = 50

Inside = 100

Outside = 0

static routes towards inside vlan interfaces are configured on ASA

nothing else is configured,,

I am using ASA 5510 security plus

MY QUESTION IS:

---------------

how can I confirm that ASA is protecting my network from outbound threats

how can I confirm that IDS/IPS is working properly..

I configured my ASA using command line,

I dont have CSC SSM Module, but my ASA has capability of it

Please advise me, how can I configure my ASA for securing my network,

If it is protecting, how can I confirm it..

Regards,

Junaid

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: