NAT errors on a ASA 5585X

[juancarlosmartinez]

Hi Guys,

I Trying to find why I got this messages, the server just moved to a DMZ and is a static public IP also is a static NAT to 10.16.2.10

10:09:36 10.0.0.4 %ASA-5-305013: Asymmetric NAT rules matched for forward and reverse flows; Connection for icmp src inside:10.4.0.20 dst dmz:10.16.2.10 (type 8, code 0) denied due to NAT reverse path failure

[Vibhor Amrodia · Accepted solution]

Hi,

Can you share the relevant NAT configuration from the ASA device.

Thanks and Regards,

Vibhor Amrodia

[juancarlosmartinez]

Thanks Vibhor,

All is good; pretty much as one of the Cisco security Team Enginners explaneid after cheking the ACL,s, this  is not an error what is telling me the 10.16.2.10 has been NAT DMZ and the only way we can log in or RDP is with the public IP, becuase we are going from a high to low security zone....

thans for you respond....