We are trying to replace a pair of PIX515e's in HA mode on 6.35 with ASA5520's in Hot/Standby mode on 7.2.2. We copied the majority of commands successfully from the PIX's to the 515e's, but when did the swap out, all Dynamic NAT sessions failed to work. Non NAT sessions to the DMZ and external sites worked fine. In doing a show xlate, we see traffic properly PAT'd.
Are NAT sessions related to licensing? My colleague did not do any license installs, but a sh ver shows the primary box as active with vpn plus enabled.
