I have following config on FWSM and it works fine for Internet bound access.object-group network LAN network-object 10.1.1.0 255.255.255.0object-group network DMZ network-object 192.168.1.0 255.255.255.0nat (LAN) 1 0.0.0.0 0.0.0.0global (outside) 1 <...