topic Re: Dynamic PAT entries in Network Security https://community.cisco.com/t5/network-security/dynamic-pat-entries/m-p/4739929#M1096009 <P>not sure - aim guess one that was not working, so check the what is the content of backup.</P> Thu, 15 Dec 2022 20:48:53 GMT balaji.bandi 2022-12-15T20:48:53Z Dynamic PAT entries https://community.cisco.com/t5/network-security/dynamic-pat-entries/m-p/4739926#M1096008 <P>Previous engineer set these up on an ASA and I am wondering why he needed a different translation rule other than interface. Any ideas???</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="DynPATA.jpg" style="width: 400px;"><img src="https://community.cisco.com/t5/image/serverpage/image-id/171149i5B7576BE0B6DE5B4/image-size/medium?v=v2&amp;px=400" role="button" title="DynPATA.jpg" alt="DynPATA.jpg" /></span></P><P> </P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="DynPATB.jpg" style="width: 400px;"><img src="https://community.cisco.com/t5/image/serverpage/image-id/171150i6277180B883EA047/image-size/medium?v=v2&amp;px=400" role="button" title="DynPATB.jpg" alt="DynPATB.jpg" /></span></P><P> </P> Thu, 15 Dec 2022 20:42:04 GMT https://community.cisco.com/t5/network-security/dynamic-pat-entries/m-p/4739926#M1096008 keithcclark71 2022-12-15T20:42:04Z Re: Dynamic PAT entries https://community.cisco.com/t5/network-security/dynamic-pat-entries/m-p/4739929#M1096009 <P>not sure - aim guess one that was not working, so check the what is the content of backup.</P> Thu, 15 Dec 2022 20:48:53 GMT https://community.cisco.com/t5/network-security/dynamic-pat-entries/m-p/4739929#M1096009 balaji.bandi 2022-12-15T20:48:53Z Re: Dynamic PAT entries https://community.cisco.com/t5/network-security/dynamic-pat-entries/m-p/4739954#M1096012 <P>Hi <a href="https://community.cisco.com/t5/user/viewprofilepage/user-id/262657">@keithcclark71</a>,</P> <P>Couple of reasons crosses my mind:</P> <UL> <LI>If you have multiple "outside" interfaces, e.g. two ISP providers, so you want to create redundancy in case one link fails, or if you are somehow load-balancing traffic via multiple interfaces</LI> <LI>If one doesn't want to expose ASAs interface on the Internet, and to get blacklisted somewhere, or for strict separation and identification of services</LI> </UL> <P>Kind regards,</P> <P>Milos</P> Thu, 15 Dec 2022 21:27:14 GMT https://community.cisco.com/t5/network-security/dynamic-pat-entries/m-p/4739954#M1096012 Milos_Jovanovic 2022-12-15T21:27:14Z