topic Re: NAT Translation Question in Network Security

NAT Translation Question

hurricane05 — Mon, 07 Dec 2020 15:39:13 GMT

Hi. Have a question regarding NAT. We have users that sit inside the office behind an ASA firewall. Users use a piece of software configured to resolve against a dns record which points to an external IP address (note we already tried to change the internal dns record but caused issues) . Can we create a NAT statement that matches the users internal subnet and when it's destined for the external ip address, to redirect to a specific ip address instead?

Thx in advance.

Re: NAT Translation Question

Rob Ingram — Mon, 07 Dec 2020 17:53:41 GMT

Hi @hurricane05

You could try something like this:-

nat (INSIDE,OUTSIDE) source static INSIDE-NET INSIDE-NET destination static ORIGINAL-DST TRANSLATED-DST no-proxy-arp

Change the ORIGINAL-DST object to represent the original IP address and TRANSLATED-DST to the ip address you want translated.

Re: NAT Translation Question

hurricane05 — Thu, 10 Dec 2020 11:09:50 GMT

Sorry for late response. I'll give that a shot and let you know. Thx.