"allow traffic through firewall without NAT" on new software code of FWSM

[sidcracker]

Hello,

Is there any checkbox on the FWSM web interface of the latest software code that provides the following option "allow traffic through firewall without NAT".

So if I loads of static statements from one interfaces to another, does this checkbox do an automatic NAT exemption? by the way i want to use NAT exemption rather than use the current set of static commands.

Thanks

[Jennifer Halim]

Yes, "no nat-control" is available on FWSM from version 3.1.1.

You just have to make sure that there is no NAT statement at all on your FWSM, and also you will need to configure ACL on all interface to allow the traffic through.

If you don't need any NATing at all on the FWSM, then "no nat-control" is your friend, and assuming that this is in single context mode.