show run nat nat (inside,outside) source static INSIDE-HOSTS INSIDE-HOSTS destination static VPN-HOSTS VPN-HOSTS no-proxy-arp route-lookup description Used in AnyConnect config. nat (dmz,outside) source static DMZ-HOSTS DMZ-HOSTS destination static VPN-HOSTS VPN-HOSTS description Used to allow RDP from VPN. nat (inside,dmz) source static DM_INLINE_NETWORK_1 DM_INLINE_NETWORK_1 destination static webserver-external webserver-internal description Used in internal URL translation. nat (inside,dmz) source dynamic internal-network internal-network destination static webserver-external webserver-internal description Used in internal URL translation. nat (inside,outside) source static INSIDE-HOSTS INSIDE-HOSTS destination static L-HOSTS L-HOSTS no-proxy-arp route-lookup description Used in LWeb VPN config. nat (inside,outside) source static any any destination static Red_Servers Red_Servers no-proxy-arp route-lookup description Used in Red VPN config. nat (outside,dmz) source static any any destination static interface QA-SERVER service QA-SERVER-TCP55100 web unidirectional ! object network WEBSERVER-TCP80 nat (dmz,outside) static interface service tcp www www object network WEBSERVER-TCP443 nat (dmz,outside) static interface service tcp https https object network WEBSERVER-TCP22 nat (dmz,outside) static interface service tcp ssh ssh object network WEBSERVER-TCP40 nat (dmz,outside) static interface service tcp 40 40 object network WEBSERVER-TCP587 nat (dmz,outside) static interface service tcp 587 587 object network WEBSERVER-TCP445 nat (dmz,outside) static interface service tcp 445 445 ! nat (any,outside) after-auto source dynamic any interface description Used to allow all outgoing traffic. show xlate | i 10.1.10.XX TCP PAT from dmz:10.1.10.XX 443-443 to outside:70.89.XX.XX 55100-55100 show access-list outside_acl | i 10.1.10.XX access-list outside_acl line 1 extended permit tcp any host 10.1.10.XX eq 55100 (hitcnt=177) 0x909ad8fc