topic Re: NAT table full . in Network Security https://community.cisco.com/t5/network-security/nat-table-full/m-p/1461319#M656532 <HTML><HEAD></HEAD><BODY><P>Are you seeing port map translation creation failed messages in the syslogs?</P><P></P><P>If there is one attack host, trying to establish too many connections it can quickly exhaust the PAT pool.</P><P></P><P>If there are no more translations slot available then yes all new connections will fail.</P><P></P><P>-KS</P></BODY></HTML> Tue, 08 Jun 2010 11:45:51 GMT Kureli Sankar 2010-06-08T11:45:51Z NAT table full . https://community.cisco.com/t5/network-security/nat-table-full/m-p/1461317#M656444 <P>Hi, what happens when the nat table (memory !) is full on a firewall module 4.0.</P><P>All traffic is stopped ?<SPAN style="background-color: #f8fafd;"> </SPAN></P><P><SPAN style="background-color: #f8fafd;">MR</SPAN></P> Mon, 11 Mar 2019 17:55:56 GMT https://community.cisco.com/t5/network-security/nat-table-full/m-p/1461317#M656444 mrobert 2019-03-11T17:55:56Z Re: NAT table full . https://community.cisco.com/t5/network-security/nat-table-full/m-p/1461318#M656501 <HTML><HEAD></HEAD><BODY><PRE __jive_macro_name="quote" class="jive_text_macro jive_macro_quote"><P>mrobert wrote:</P><P></P><P>Hi, what happens when the nat table (memory !) is full on a firewall module 4.0.</P><P>All traffic is stopped ?<SPAN style="background-color: #f8fafd;"> </SPAN></P><P><SPAN style="background-color: #f8fafd;">MR</SPAN></P></PRE><P></P><P>MR</P><P></P><P>As far as i know it should stop all new connections but still continue to pass traffic for connections that have already been setup in the xlate table.</P><P></P><P>Jon</P></BODY></HTML> Tue, 08 Jun 2010 11:43:24 GMT https://community.cisco.com/t5/network-security/nat-table-full/m-p/1461318#M656501 Jon Marshall 2010-06-08T11:43:24Z Re: NAT table full . https://community.cisco.com/t5/network-security/nat-table-full/m-p/1461319#M656532 <HTML><HEAD></HEAD><BODY><P>Are you seeing port map translation creation failed messages in the syslogs?</P><P></P><P>If there is one attack host, trying to establish too many connections it can quickly exhaust the PAT pool.</P><P></P><P>If there are no more translations slot available then yes all new connections will fail.</P><P></P><P>-KS</P></BODY></HTML> Tue, 08 Jun 2010 11:45:51 GMT https://community.cisco.com/t5/network-security/nat-table-full/m-p/1461319#M656532 Kureli Sankar 2010-06-08T11:45:51Z