nat or no nat

[John Blakley]

I have a diagram to help better explain what I'm wondering. I think I'll need to, but maybe not.

My ASA has a private address on the inside interface, and a public address on the outside. Will I need to nat if my device in front is natting for other traffic?

Thanks,

John

[JamesLuther · Accepted solution]

Hi,

The question would be, does the fatpipe device have routes to your internal network?

If it does then there is no need to NAT on the ASA and you can have all your NAT in one place. If it doesn't have your internal networks in it's routing table then you will need to NAT on the ASA.

Regards

[John Blakley]

Thanks James! The Fatpipe doesn't have our internal networks set up. It just has an "internal gateway" of my ASA's public address. I'm converting from a Symantec firewall now, and I don't see where it's natting, but I've got nat enabled on the ASA.

Thanks again,

John