topic Clear XLATE break all current connections using NAT on the ASA? in Network Security https://community.cisco.com/t5/network-security/clear-xlate-break-all-current-connections-using-nat-on-the-asa/m-p/3895838#M5822 <P>Clear XLATE break all current connections using NAT on the ASA?</P> Fri, 21 Feb 2020 17:19:55 GMT CiscoBrownBelt 2020-02-21T17:19:55Z Clear XLATE break all current connections using NAT on the ASA? https://community.cisco.com/t5/network-security/clear-xlate-break-all-current-connections-using-nat-on-the-asa/m-p/3895838#M5822 <P>Clear XLATE break all current connections using NAT on the ASA?</P> Fri, 21 Feb 2020 17:19:55 GMT https://community.cisco.com/t5/network-security/clear-xlate-break-all-current-connections-using-nat-on-the-asa/m-p/3895838#M5822 CiscoBrownBelt 2020-02-21T17:19:55Z Re: Clear XLATE break all current connections using NAT on the ASA? https://community.cisco.com/t5/network-security/clear-xlate-break-all-current-connections-using-nat-on-the-asa/m-p/3895863#M5823 Hi,<BR />Well it clears the nat sessions on the device and therefore the current connections, TCP applications should detect packet loss and re-transmit and a new nat session will be established.<BR /><BR />HTH Tue, 23 Jul 2019 16:36:41 GMT https://community.cisco.com/t5/network-security/clear-xlate-break-all-current-connections-using-nat-on-the-asa/m-p/3895863#M5823 Rob Ingram 2019-07-23T16:36:41Z Re: Clear XLATE break all current connections using NAT on the ASA? https://community.cisco.com/t5/network-security/clear-xlate-break-all-current-connections-using-nat-on-the-asa/m-p/3895866#M5825 Awesome great!<BR /><BR />In regards to a IPSEC VPN on ASA, can you simply add a new host or create a new object-group and add all the source hosts in the IPSEC profile on ASA without breaking anything assuming remote end has allowed the new host? Tue, 23 Jul 2019 16:39:07 GMT https://community.cisco.com/t5/network-security/clear-xlate-break-all-current-connections-using-nat-on-the-asa/m-p/3895866#M5825 CiscoBrownBelt 2019-07-23T16:39:07Z Re: Clear XLATE break all current connections using NAT on the ASA? https://community.cisco.com/t5/network-security/clear-xlate-break-all-current-connections-using-nat-on-the-asa/m-p/3895875#M5892 Yes, you can add the new network/host to the ACL or to the object group that is referenced in the ACL in use by the crypto map. Nothing should break, as long as both ends of the VPN tunnel have been configured with the same host/network with the correct mask. Tue, 23 Jul 2019 16:51:59 GMT https://community.cisco.com/t5/network-security/clear-xlate-break-all-current-connections-using-nat-on-the-asa/m-p/3895875#M5892 Rob Ingram 2019-07-23T16:51:59Z