ASA policy-nat is working but acl is not hit

sok_senmonorom — Mon, 11 Mar 2019 02:57:00 GMT

Hope you guys can help explain why is it working this strange. Thank you.

access-list NET1 permit ip host 10.1.2.27 10.76.5.0 255.255.255.224

static (inside,outside) 192.168.100.100 access-list NET1

ciscoasa(config)# show access-list

access-list NET1 line 1 extended permit ip host 10.1.2.27 10.76.5.0 255.255.255.224 (hitcnt=0) 0x19580e75

ciscoasa(config)# show xlate

3 in use, 4 most used

Global 192.168.100.100 Local 10.1.2.27

...

ciscoasa(config)# show nat

NAT policies on Interface inside:

match ip inside 10.1.2.27 255.255.255.255 outside 10.76.5.0 255.255.255.224

static translation to 192.168.100.100

translate_hits = 9, untranslate_hits = 28

ASA policy-nat is working but acl is not hit

Tarik Admani — Tue, 08 Jan 2013 16:15:26 GMT

Hi,

It seems as if this is the behavior with access lists that are associated with NAT. I did a few checks around the support forums and found that this could be the issue and there isnt anything to worry about. However if you can move this thread to the firewalling community I am sure they will be able to confirm this for you.

Tarik Admani
*Please rate helpful posts*

topic ASA policy-nat is working but acl is not hit in Network Access Control

ASA policy-nat is working but acl is not hit

ASA policy-nat is working but acl is not hit