topic NAT reverse path failure in Network Security

NAT reverse path failure

yasaman64 — Mon, 11 Mar 2019 23:22:06 GMT

Hello everyone,

Could someone help me with this issue:

5 Jun 22 2012 10:07:48 305013 50.96.132.209 Asymmetric NAT rules matched for forward and reverse flows; Connection for icmp src outside2:68.153.135.201 dst fwinside:54.92.134.220 (type 8, code 0) denied due to NAT reverse path failure

I keep getting tis error on my ASA considering that I dont even have NAT rules for that source and destination, do you have any idea what whould the problem be?

Thanks

NAT reverse path failure

Julio Carvajal — Fri, 22 Jun 2012 20:45:01 GMT

Hello Yasaman,

There is definetely a nat statement causing this issue.

I would have to take a look at the Nat statement in order to solve it.

NAT reverse path failure

Alexander Moorthy — Mon, 25 Jun 2012 11:55:08 GMT

Hi Yasaman,

The nat-control is enabled on the firewall,thats why you need a translation to allow the specific traffic.

To work , add a nat-exempt from the source to destination/ destination to source.

NAT reverse path failure

yasaman64 — Mon, 25 Jun 2012 13:43:56 GMT

Thank you,

The problem was a dynamic NAT rule. I added a NAT exempt and everything worked fine.

NAT reverse path failure

Julio Carvajal — Mon, 25 Jun 2012 17:17:16 GMT

Hello Yasaman,

Great to hear that everything worked fine.

Please mark the question as answered so future users can learn from this topic.

Regards,

Julio