Help with NAT and ACL

[dhall8436]

I am trying to make an internal host available to the outside, and for some reason am having some trouble doing so. Here's the relevant access list and NAT entry:

(inside1) to (outside1) source static NurseryInsp NurseryInsp_OUT

access-group outside1_access_in in interface outside1
access-list outside1_access_in extended permit tcp any object NurseryInsp object-group DM_INLINE_TCP_8
object-group service DM_INLINE_TCP_8 tcp
port-object eq www
port-object eq https

the hosts are NurseryInsp - 172.16.9.52 on Inside1

NurseryInsp_OUT = 159.87.64.36 on Outside1

Packet trace shows the NAT rule dropped the packet, but the rule seems correct.

Can anyone assist?

[Luke Oxley]

dhall8436,

Thanks for your post. What platform are you using? - I assume ASA. If so please let me know the version. If you could please attach a fully sanitised configuration too so I can get a better picture, that would be great. We will get this sorted for you.

Kind regards,

Luke

---

Please rate helpful posts and mark correct answers.

[dhall8436]

After a little more work, I think we have it..