topic Re: Help creating a NAT rule from ASA to FTD using FPMC in Network Security

Help creating a NAT rule from ASA to FTD using FPMC

justinarendt — Fri, 21 Feb 2020 14:52:58 GMT

I am trying to figure out how to replicate an existing configuration for NAT from my ASA to a FTD using FPMC to configure the device (5506-X). I have attached a screenshot of what works now in the ASA.

I want to be able to do port natting from the outside interface on a per port basis using my single EXT IP on the outside interface.

All traffic inside, and outbound - nat to EXT IP

Inside ServerA Port 1111UDP - Nat to EXT IP 1111

Inside ServerA Port 1111TCP - Nat to EXT IP 1111

Inside ServerB Port 8080TCP - Nat to EXT IP 8080

Basically I want to map multiple internal IP's with different services to be allowed inbound from a single EXT IP on the outside.

I can't seem to figure this out on the FTD, but it works great with ASA.

Any help would be much appreciated.

Cheers,

Justin

Re: Help creating a NAT rule from ASA to FTD using FPMC

s7pizzi — Mon, 23 Apr 2018 08:47:26 GMT

Hi Justin,

I have the same problem. How did you solve it?

Re: Help creating a NAT rule from ASA to FTD using FPMC

yogdhanu — Mon, 23 Apr 2018 10:40:45 GMT

if you have ASA and migrating to FTD, you can try migration tool to convert the config.

https://www.cisco.com/c/en/us/td/docs/security/firepower/620/asa2ftd-migration/asa2ftd-migration-guide-620/asa2ftd_migration_procedure.html

You can try dynamic NAT on FMC for FTD.

Hope it helps,

Yogesh