topic Global statement without a Nat statement in Network Security

Global statement without a Nat statement

marktaipp — Tue, 12 Mar 2019 00:01:39 GMT

Hi,

On our ASA 5510 (running IOS 7.2) we have a global statement that does not have a corresponding nat statement e.i. global (outside) 2 x.x.x.x , but no nat (inside) 2 blah 255.255.0.0

I am assuming that this is a mistake and that global without a nat pair does nothing. Or does it?

Thanks

Mark

Global statement without a Nat statement

Jennifer Halim — Sun, 30 Sep 2012 03:45:19 GMT

you are absolutely correct, nat/global statements needs to come in pair.

Global statement without a Nat statement

Jon Marshall — Sun, 30 Sep 2012 13:42:18 GMT

Mark

Worth checking if you have any other interfaces on the firewall other than the inside interface to see if there is a nat (interface) 2 statement.

Jon

Global statement without a Nat statement

marktaipp — Mon, 01 Oct 2012 02:16:16 GMT

Hi Jon,

The firewall has three interfaces inside, outside and DMZ. But is also no "nat (DMZ) 2 blah 255.255.255.0" statement to match the global. I have inherited the config and think that a nat/global pair was but in for what ever resaon, then half pulled out. I wanted to make sure that global statement by itself did nothing and could be removed.

Thanks for your suggestion.

Mark