cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1907
Views
0
Helpful
0
Replies

ASA NAT - Inside host Internet Access

Fantas
Level 1
Level 1

Hi,

I have below scenario and wana allow internet access for inside hosts.

 

Currently hosts access Internet through web proxy ( Non Cisco) and Proxy address nated on external firewall and connect to Internet. I have below scenario.

 

Group - A

Inside Network : 172.18.0.0/16

web proxy IP : 172.17.25.X

Public Address : 202.23.26.x

 

Group - B

Inside Network : 172.18.0.0/16

Public Address : 202.23.27.x

 

Group-A hosts access internet through web proxy and Internet ASA NAT proxy IP (PAT) to public IP in group-A and all hosts are able to access internet  without any issues.

 

Now I want to setup another path for Internet access which doesn't pass through web proxy and hosts should be able to access internet directly and being nated to public IP in Group-B and connect them to internet.

This is required when inside hosts remove proxy setting from browser and should be able to connect to internet.

 

What nat is best option for inside network in Group-A or B to connect to Internet without impacting existing internet access connecting through web proxy.

 

So I wana see If I add proxy clients pass through web proxy and If I remove clients go directly and still should be able to connect to internet.

 

 

 

0 Replies 0
Review Cisco Networking for a $25 gift card