topic ASA 5525-X in Network Security

ASA 5525-X

mzoricbg1 — Tue, 12 Mar 2019 05:25:36 GMT

Hi, I have a question about ASA 5525-X. Can this ASA be used to dynamically PAT one IP subnet of private IP addresses (from inside port to outside port) and in the same time just to route other IP subnet of public IP addresses without PAT?

I would have a public IP address on outside interface. And another public IP subnet on inside part of the network.

Sure, that's frequently done

Marvin Rhoads — Sat, 31 Jan 2015 00:11:38 GMT

Sure, that's frequently done with ASAs going back many years.

You can either:

a. exempt the inside public addresses and dynamically PAT all remaining (private) addresses, or b. setup a single object NAT policy for only the private IP addresses you want to match on, leaving the others untranslated.