NAT not required to cross ASA interfaces

[lcaruso]

Hi,

I"m looking to confirm that NAT is not needed when crossing ASA interfaces; for example, when going from an inside interface (sec 100) to a dmz interface (sec 50) and back.

Back when NAT was required to cross ASA interfaces, I know there were different setups like exemption and hiding, but I thought it was possible now to just let traffic go across the interfaces and all that is needed is ACLs. 

Don't have a test unit at the moment and need to make some changes that will work the first time. 

Thanks for your input.

[Karsten Iwen]

That's exactly how it works. NAT is only done if there is a NAT config between two interfaces. If there are no NAT rules, then the traffic is routed without translation.

[lcaruso]

Thanks for confirming. Don't always have time to re-read the docs.