<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic nat rules in Network Security</title>
    <link>https://community.cisco.com/t5/network-security/nat-rules/m-p/2408720#M306217</link>
    <description>&lt;P&gt;I have enabled access rules for certain hosts to permit icmp from the dmz to access the inside interface but it still wont work.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;I was thinking no nat rules would be necessary, but are they? The security of the inside interface is a higher number than the dmz.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;If I do need to create a nat rule what would it be? Version 9.x asa. Thanks.&lt;SPAN id="mce_marker"&gt; &lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;I have enabled access rules for certain hosts to permit icmp from the dmz to access the inside interface but it still wont work.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;I was thinking no nat rules would be necessary, but are they? The security of the inside interface is a higher number than the dmz.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;If I do need to create a nat rule what would it be? Version 9.x asa. Thanks. &lt;/P&gt;</description>
    <pubDate>Tue, 12 Mar 2019 03:25:45 GMT</pubDate>
    <dc:creator>tolinrome tolinrome</dc:creator>
    <dc:date>2019-03-12T03:25:45Z</dc:date>
    <item>
      <title>nat rules</title>
      <link>https://community.cisco.com/t5/network-security/nat-rules/m-p/2408720#M306217</link>
      <description>&lt;P&gt;I have enabled access rules for certain hosts to permit icmp from the dmz to access the inside interface but it still wont work.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;I was thinking no nat rules would be necessary, but are they? The security of the inside interface is a higher number than the dmz.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;If I do need to create a nat rule what would it be? Version 9.x asa. Thanks.&lt;SPAN id="mce_marker"&gt; &lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;I have enabled access rules for certain hosts to permit icmp from the dmz to access the inside interface but it still wont work.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;I was thinking no nat rules would be necessary, but are they? The security of the inside interface is a higher number than the dmz.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;If I do need to create a nat rule what would it be? Version 9.x asa. Thanks. &lt;/P&gt;</description>
      <pubDate>Tue, 12 Mar 2019 03:25:45 GMT</pubDate>
      <guid>https://community.cisco.com/t5/network-security/nat-rules/m-p/2408720#M306217</guid>
      <dc:creator>tolinrome tolinrome</dc:creator>
      <dc:date>2019-03-12T03:25:45Z</dc:date>
    </item>
    <item>
      <title>nat rules</title>
      <link>https://community.cisco.com/t5/network-security/nat-rules/m-p/2408721#M306219</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;Hello,&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;You need :&lt;/P&gt;&lt;OL&gt;&lt;LI&gt;ACL on the DMZ interface allowing the traffic&lt;/LI&gt;&lt;LI&gt;ICMP inspection (Fixup protocol ICMP)&lt;/LI&gt;&lt;/OL&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;As you said no nat needed&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Looking for some Networking Assistance?&amp;nbsp; &lt;BR /&gt;&lt;SPAN&gt;Contact me directly at &lt;/SPAN&gt;&lt;A class="jive-link-email-small" href="mailto:jcarvaja@laguiadelnetworking.com"&gt;jcarvaja@laguiadelnetworking.com&lt;/A&gt;&lt;SPAN&gt; &lt;/SPAN&gt;&lt;BR /&gt; &lt;BR /&gt;I will fix your problem ASAP. &lt;BR /&gt; &lt;BR /&gt;Cheers, &lt;BR /&gt; &lt;BR /&gt;Julio Carvajal Segura &lt;BR /&gt;&lt;A class="jive-link-external-small" href="http://laguiadelnetworking.com"&gt;http://laguiadelnetworking.com&lt;/A&gt;&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Tue, 07 Jan 2014 00:54:02 GMT</pubDate>
      <guid>https://community.cisco.com/t5/network-security/nat-rules/m-p/2408721#M306219</guid>
      <dc:creator>Julio Carvajal</dc:creator>
      <dc:date>2014-01-07T00:54:02Z</dc:date>
    </item>
    <item>
      <title>nat rules</title>
      <link>https://community.cisco.com/t5/network-security/nat-rules/m-p/2408722#M306221</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;What if those hosts on the dmz are being nated from the outside, still no nat needed?&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;outside&amp;gt;&amp;gt;dmz&amp;gt;&amp;gt;inside&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Tue, 07 Jan 2014 02:41:41 GMT</pubDate>
      <guid>https://community.cisco.com/t5/network-security/nat-rules/m-p/2408722#M306221</guid>
      <dc:creator>tolinrome tolinrome</dc:creator>
      <dc:date>2014-01-07T02:41:41Z</dc:date>
    </item>
    <item>
      <title>nat rules</title>
      <link>https://community.cisco.com/t5/network-security/nat-rules/m-p/2408723#M306223</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;Hello,&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;If you nat the DMZ to Outside there is no requirement to Nat the DMZ o the Inside.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;The question would be:&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Would u like to access the DMZ hosts by using their Public IP address or the private one?&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Looking for some Networking Assistance?&amp;nbsp; &lt;BR /&gt;&lt;SPAN&gt;Contact me directly at &lt;/SPAN&gt;&lt;A class="jive-link-email-small" href="mailto:jcarvaja@laguiadelnetworking.com"&gt;jcarvaja@laguiadelnetworking.com&lt;/A&gt;&lt;SPAN&gt; &lt;/SPAN&gt;&lt;BR /&gt; &lt;BR /&gt;I will fix your problem ASAP. &lt;BR /&gt; &lt;BR /&gt;Cheers, &lt;BR /&gt; &lt;BR /&gt;Julio Carvajal Segura &lt;BR /&gt;&lt;A class="jive-link-external-small" href="http://laguiadelnetworking.com"&gt;http://laguiadelnetworking.com&lt;/A&gt;&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Tue, 07 Jan 2014 02:43:07 GMT</pubDate>
      <guid>https://community.cisco.com/t5/network-security/nat-rules/m-p/2408723#M306223</guid>
      <dc:creator>Julio Carvajal</dc:creator>
      <dc:date>2014-01-07T02:43:07Z</dc:date>
    </item>
  </channel>
</rss>

