Nat/Static Nat confusion

[mo shea]

Hi...

One of our sites have an ISA server behind ASA5520 7.2(2). It is being used as a proxy server as well as email. All its interfaces use private IPs and all internal clients access http through this Server.

In order to allow internal clients to browse the internet, will a Static (inside, Outside) command suffice or I should add a global command defining the public IP that corresponds to the ISA external NIC (connected to ASA inside) and a NAT(inside) statement as well?

Ex:

static(ISA external, Public IP1) ....

or add

global (Outside) 1 Public IP1

nat(inside) 1 ISA external

Is this a redundant configuration?

As for email access I have created the required static (inside, Outside) command and access-list

[Jon Marshall]

Hi

If you already have a static setup for your ISA server due to your e-mail requirements then you do not need to do anything else on the ASA device for internet access as long as all access to the internet goes via the ISA server and there are no direct connections from internal clients to the Internet.

HTH

Jon