topic Hi Nevile, in Network Security

When I create a nat, the computer can not browse internet

Neville Sanford — Tue, 12 Mar 2019 06:52:24 GMT

Hello

I have a ASA 5508x. I created a nat for a web server. It works fine. People can get to my webserver from the outside. However this server now can no longer browse the internet. All other computers that are not using nat can browse the internet. I took the nat away and the computer could browse the internet again.

Please help

Hi Neville,

Akshay Rastogi — Wed, 11 Nov 2015 15:04:53 GMT

Hi Neville,

Could you please share the sample configuration you are using?

Regards,

Akshay Rastogi

ftp mode passivesame-security

Neville Sanford — Wed, 11 Nov 2015 15:27:43 GMT

Hi Nevile,

Akshay Rastogi — Thu, 12 Nov 2015 15:51:15 GMT

Hi Nevile,

What i could remember from your earlier configuration, configure specific with your interfaces in your nat statements(do not use any any in interface). Specify exact interface name wherever possible.

For internet traffic have something like :

object net obj-any

subnet 0 0

nat(inside,outside) dynamic interface

For static nats try something like :

object net obj-server

host <webserver internal ip>

nat (inside,outside) static <mapped-ip>

Also when you mention host are able to reach internet w/o nat, does that mean that some other device peforming nating to public ip for internal private hosts?

Regards,

Akshay Rastogi