https://community.cisco.com/t5/network-security/group-and-optimize-the-nat-rules/m-p/5279347#M1120516 <P>Good morning everyone, I have a Cisco secure firewall1210CE threat defense with software 7.6.0-113 with two external interfaces outside1 and outside2 (one for primary isp, the other for backup isp). With device manager I created static NAT rules for outside1 to accept incoming connections on a series of ports (for example from 30000 to 30005) and redirect them to the same ports on an internal server. I created a rule for each port. Now I should repeat the same configurations for the outside2 interface.<BR />The access rule instead provides an allow for the outside_zone source (outside1 and outside2), any ports with inside_zone destination, internal server address, a group of ports.<BR />Is the procedure correct? Is there a way to group and optimize the NAT rules?<BR />Thanks to anyone who can give me clarifications.<BR />Have a good day<BR />Giuseppe</P> Tue, 08 Apr 2025 14:14:31 GMT Brunetta7 2025-04-08T14:14:31Z https://community.cisco.com/t5/network-security/group-and-optimize-the-nat-rules/m-p/5279347#M1120516 <P>Good morning everyone, I have a Cisco secure firewall1210CE threat defense with software 7.6.0-113 with two external interfaces outside1 and outside2 (one for primary isp, the other for backup isp). With device manager I created static NAT rules for outside1 to accept incoming connections on a series of ports (for example from 30000 to 30005) and redirect them to the same ports on an internal server. I created a rule for each port. Now I should repeat the same configurations for the outside2 interface.<BR />The access rule instead provides an allow for the outside_zone source (outside1 and outside2), any ports with inside_zone destination, internal server address, a group of ports.<BR />Is the procedure correct? Is there a way to group and optimize the NAT rules?<BR />Thanks to anyone who can give me clarifications.<BR />Have a good day<BR />Giuseppe</P> Tue, 08 Apr 2025 14:14:31 GMT https://community.cisco.com/t5/network-security/group-and-optimize-the-nat-rules/m-p/5279347#M1120516 Brunetta7 2025-04-08T14:14:31Z