NAT Rule Causing Internet Connectivity Issues
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
03-22-2022 04:25 AM
Hi,
I have a NAT rule on our FPR-1010 running ASA to allow incoming traffic on outside interface on port 65020. The rule works and have required access externally.
The problem I have is the internal server that it is accessing has internet connectivity issues.
For example when I open Chrome on it I can't get to https://www.grc.com but can get to other sites. This is causing problems for the software running on the server.
This is the NAT rule.
(Inside) to (Outside) source static SERVER interface service any 65020Source inactive.
Does anyone know what the issue could be please?
Thanks
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
03-22-2022 05:05 AM
For example when I open Chrome on it I can't get to https://www.grc.com but can get to other sites. This is causing problems for the software running on the server.
is this from inside network or outside network ?
what you mean other site ? they also NATted ?
from Lan are you able to access that site ? what port ?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
03-22-2022 06:24 AM
(Inside) to (Outside) source static SERVER interface service any 65020
the source Port is OK
the destination Port is Wrong ...
service any 65020 at the end of NAT is wrong, this for destination port, i.e.
costumer in outside will ask specific port that NAT to 65020, here you make all destination port NAT to 65020...!!!
please change it to be
Inside-FW-Outside
the client in outside will use port for example 5000 will nat to 65020 which use by Server in Inside.
the client in outside will use port 65020 will nat to 65020 which use by server in inside.
I think you misunderstood the Service and assign ANY as it the source port.
