I'm afraid that if I post the entire configuration, I'll miss some identifiable info in it.
I realized, though, that the IP assigned to the outside interface ends in .1, not .4
interface Ethernet0/0
nameif outside
security-level 0
ip address Y.Y.Y.1 255.255.255.240
I had assumed it was .4, since outside devices see the ASA at Y.Y.Y.4, including a credit card company that is trying to do a security vulnerability scan, which is why I'm doing this. If I go to any website that shows my public IP, it's the Y.Y.Y.4 one.
I am able to successfully ping Y.Y.Y.1, so hopefully the credit card PCI compliance company will accept that address. If they insist on scanning Y.Y.Y.4, then I'll still have to figure out how to ping that address. Here are my NAT rules:
object network obj-192.168.1.9
nat (inside,outside) static Y.Y.Y.2
object network obj-192.168.1.13
nat (inside,outside) static Y.Y.Y.3
object network TS-SERVER
nat (inside,outside) static Y.Y.Y.7
object network obj-192.168.1.12
nat (inside,outside) static Y.Y.Y.5
object network obj-192.168.1.193
nat (inside,outside) static Y.Y.Y.6
object network obj_any
nat (inside,outside) dynamic Y.Y.Y.4
object network pserver
nat (inside,outside) static Y.Y.Y.8
object network SNVR
nat (any,any) static Y.Y.Y.9
object network obj-192.168.120.101
nat (inside,outside) static Y.Y.Y.11
