Hi Julio,One more question, if I need access-list for 10.170.0.0, then I will need to add all outside networks to it ?& can you explain" nat (inside) 1 0 0 "thksmark

Hi Julio,Thank you for all your time & help.mark

Hi Julio,it works :-) , thank you for all your help, can you please explain what this command did & access from outside networks to 10.1.1.57 will work now ?should I remove these commands as they were added for testing:static (inside,outside) tcp int...

Hi Julio,I am trying to access 10.170.0.5 & other IP's in outside-acl,  I can ping from firewall but not from 10.1.1.57.This is the server which all remote devices in outside-acl will access. I can only ping 10.8.8.2 from 10.1.1.57.thksmark

Hi Julio,it worked, still can't ping from 10.1.1.57asa# packet-tracer input outside tcp 10.170.0.5 1025 10.8.8.1 80Phase: 1Type: UN-NATSubtype: staticResult: ALLOWConfig:static (inside,outside) tcp interface www 10.1.1.57 www netmask 255.255.255.255 ...