topic Re: ASA5525: Separate NAT for TCP and UDP? in Network Security https://community.cisco.com/t5/network-security/asa5525-separate-nat-for-tcp-and-udp/m-p/4548855#M1087237 <P><a href="https://community.cisco.com/t5/user/viewprofilepage/user-id/981166">@CiscoMedMed</a> what is your objective here?</P> <P>Are you setting up NAT to publish a server on the internet or just provide outbound internet access?</P> <P>&nbsp;</P> <P>If publishing a server on the internet, then create a static NAT based on the protocol and port.</P> <P>If that just for internet access, you create a dynamic PAT based on IP network on any port/protocol.</P> Wed, 09 Feb 2022 17:12:47 GMT Rob Ingram 2022-02-09T17:12:47Z ASA5525: Separate NAT for TCP and UDP? https://community.cisco.com/t5/network-security/asa5525-separate-nat-for-tcp-and-udp/m-p/4548849#M1087236 <P>When creating a NAT object, advanced settings asks you to specify TCP or UDP protocol. Does that mean you should create one NAT with private/public pair for UDP and one for TCP?&nbsp;</P><P><span class="lia-inline-image-display-wrapper lia-image-align-left" image-alt="NATGrab1.png" style="width: 497px;"><img src="https://community.cisco.com/t5/image/serverpage/image-id/143460iE2B50D0841D17098/image-size/large?v=v2&amp;px=999" role="button" title="NATGrab1.png" alt="NATGrab1.png" /></span></P><P>&nbsp;</P><DIV class="">&nbsp;</DIV><P>&nbsp;</P> Wed, 09 Feb 2022 17:08:31 GMT https://community.cisco.com/t5/network-security/asa5525-separate-nat-for-tcp-and-udp/m-p/4548849#M1087236 CiscoMedMed 2022-02-09T17:08:31Z Re: ASA5525: Separate NAT for TCP and UDP? https://community.cisco.com/t5/network-security/asa5525-separate-nat-for-tcp-and-udp/m-p/4548855#M1087237 <P><a href="https://community.cisco.com/t5/user/viewprofilepage/user-id/981166">@CiscoMedMed</a> what is your objective here?</P> <P>Are you setting up NAT to publish a server on the internet or just provide outbound internet access?</P> <P>&nbsp;</P> <P>If publishing a server on the internet, then create a static NAT based on the protocol and port.</P> <P>If that just for internet access, you create a dynamic PAT based on IP network on any port/protocol.</P> Wed, 09 Feb 2022 17:12:47 GMT https://community.cisco.com/t5/network-security/asa5525-separate-nat-for-tcp-and-udp/m-p/4548855#M1087237 Rob Ingram 2022-02-09T17:12:47Z