Hi,
I have below scenario and wana allow internet access for inside hosts.
Currently hosts access Internet through web proxy ( Non Cisco) and Proxy address nated on external firewall and connect to Internet. I have below scenario.
Group - A
Inside Network : 172.18.0.0/16
web proxy IP : 172.17.25.X
Public Address : 202.23.26.x
Group - B
Inside Network : 172.18.0.0/16
Public Address : 202.23.27.x
Group-A hosts access internet through web proxy and Internet ASA NAT proxy IP (PAT) to public IP in group-A and all hosts are able to access internet without any issues.
Now I want to setup another path for Internet access which doesn't pass through web proxy and hosts should be able to access internet directly and being nated to public IP in Group-B and connect them to internet.
This is required when inside hosts remove proxy setting from browser and should be able to connect to internet.
What nat is best option for inside network in Group-A or B to connect to Internet without impacting existing internet access connecting through web proxy.
So I wana see If I add proxy clients pass through web proxy and If I remove clients go directly and still should be able to connect to internet.