Dynamic NAT for Server

[Mokhalil82]

Hi

I am new to firewalls and was wondering if this will work. I have an internal FTP server where we copy files to and they automatically get sent to an external suppliers FTP server who's network sits on a separate interface on our asa using a public IP range.

Internal server --------------------ASA-------------------------Supplier Server

So the connection is initiated from the inside and it copies any files to this public addressed server. My question is we have a dynamic PAT setup for this suppliers network so for anything from the inside to the supplier to be patted using the suppliers interface IP. Will this PAT work for this FTP connection or do I need to define a 1-2-1 NAT.

Thanks 

[Vibhor Amrodia]

Hi,

Yes , I think it should work.

Now , enabling the FTP inspection or not would depend on the type of the FTP i.e. Passive or Active.

Thanks and Regards,

Vibhor Amrodia