topic Re: PIX firewall policy based NAT orders? in Network Security https://community.cisco.com/t5/network-security/pix-firewall-policy-based-nat-orders/m-p/303371#M592295 <HTML><HEAD></HEAD><BODY><P>thanks. but which portion of the docu? The URL direct me to the begining of the lenghy document?</P></BODY></HTML> Sat, 05 Jun 2004 02:49:39 GMT zhichao 2004-06-05T02:49:39Z PIX firewall policy based NAT orders? https://community.cisco.com/t5/network-security/pix-firewall-policy-based-nat-orders/m-p/303369#M592293 <P>The PIX is configured with two ACls, and these two ACLs are used for the policy based NAT to translate them to two different public IP addresses.</P><P></P><P>Since there is no deny statement is allowed for policy based NAT, we faced a lot of problem when creating the ACLs.</P><P>If the two ACLs are overlapping, how does PIX decide which one to use ? By the NAT ID? or by longest match? or ...</P><P></P><P></P><P>thanks!</P> Fri, 21 Feb 2020 07:25:46 GMT https://community.cisco.com/t5/network-security/pix-firewall-policy-based-nat-orders/m-p/303369#M592293 zhichao 2020-02-21T07:25:46Z Re: PIX firewall policy based NAT orders? https://community.cisco.com/t5/network-security/pix-firewall-policy-based-nat-orders/m-p/303370#M592294 <HTML><HEAD></HEAD><BODY><P>You could refer to the documentation to see if it helps. <A class="jive-link-custom" href="http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_sw/v_63/config/bafwcfg.htm#1113601" target="_blank">http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_sw/v_63/config/bafwcfg.htm#1113601</A></P></BODY></HTML> Fri, 04 Jun 2004 12:46:59 GMT https://community.cisco.com/t5/network-security/pix-firewall-policy-based-nat-orders/m-p/303370#M592294 drolemc 2004-06-04T12:46:59Z Re: PIX firewall policy based NAT orders? https://community.cisco.com/t5/network-security/pix-firewall-policy-based-nat-orders/m-p/303371#M592295 <HTML><HEAD></HEAD><BODY><P>thanks. but which portion of the docu? The URL direct me to the begining of the lenghy document?</P></BODY></HTML> Sat, 05 Jun 2004 02:49:39 GMT https://community.cisco.com/t5/network-security/pix-firewall-policy-based-nat-orders/m-p/303371#M592295 zhichao 2004-06-05T02:49:39Z