topic Re: ASA nat access list hit count in Network Security https://community.cisco.com/t5/network-security/asa-nat-access-list-hit-count/m-p/972174#M919074 <HTML><HEAD></HEAD><BODY><P>I think to speed up things, for existing sessions (already in the state table) NAT policy and various other lookups etc are not performed. Perhaps this is the reason why you are seeing this behavior. So you will see a hit in the NAT statement for only the first packet in the flow (or based on some other similar criteria).</P><P></P><P>Regards</P><P></P><P>Farrukh</P></BODY></HTML> Mon, 02 Jun 2008 18:21:13 GMT Farrukh Haroon 2008-06-02T18:21:13Z ASA nat access list hit count https://community.cisco.com/t5/network-security/asa-nat-access-list-hit-count/m-p/972173#M919066 <P>Can someone tell me why v7.2 of the PIX/ASA OS doesn't register hits on an access list used for nat? I always used this on v6 to check the rule was working. The show nat command seems to be a bit random with it's counters as well. Is there another way to monitor the nat rules that i'm missing? </P> Mon, 11 Mar 2019 12:54:03 GMT https://community.cisco.com/t5/network-security/asa-nat-access-list-hit-count/m-p/972173#M919066 edd.phillips 2019-03-11T12:54:03Z Re: ASA nat access list hit count https://community.cisco.com/t5/network-security/asa-nat-access-list-hit-count/m-p/972174#M919074 <HTML><HEAD></HEAD><BODY><P>I think to speed up things, for existing sessions (already in the state table) NAT policy and various other lookups etc are not performed. Perhaps this is the reason why you are seeing this behavior. So you will see a hit in the NAT statement for only the first packet in the flow (or based on some other similar criteria).</P><P></P><P>Regards</P><P></P><P>Farrukh</P></BODY></HTML> Mon, 02 Jun 2008 18:21:13 GMT https://community.cisco.com/t5/network-security/asa-nat-access-list-hit-count/m-p/972174#M919074 Farrukh Haroon 2008-06-02T18:21:13Z