INE Live Webinar : Understanding and Implementing NAT on Cisco ASA Firewall

Working towards your CCIE Security Lab certification? Want to learn how NAT works or how to configure NAT on a Cisco ASA firewall? If so, join INE instructor Rohit Pardasani for an interactive session on Understanding and Implementing NAT on a Cisco ASA firewall. Rohit will lead you through configuring Dynamic NAT, Static NAT and Twice NAT. Familiarity with ASA is advised, but not required to join this session.

[kielmartin]

Ok, i found my instructor for Security, and I have to say, it is a relaxing feeling to watch someone just sit back and teach the material. Thank you, this is the type of training that I do and it works. You my friend are going to be sharing alot of late nights indirectly with security. Thank you for doing this in a way that is relatable. This lesson alone lets me know that I need to revisit the ASA. I got a job working in the SOC (first time working in security) and have been trying to change from ROUTE/SWITCH into a different realm and security wins the election. Finding an instructor that I relate to is hard and you, my friend, are it. Thank you so much.

[jaradsamraj]

Rohit !!! You are my path to the CCIE Security Destiny... Thank You .. Excellent Work!

[seand]

Thank you, This was a really good session. You made NAT easy to understand, very concise and clear. I can’t thank you enough, I will definitely be looking at your courses on INE.

[CristopherCayabyab]

Thank you very much Rohit, again very excellent way of teaching NAT on ASA.

[yogeshnegi]

Thankyou for sharing great information & detail explanation @INEtraining

[RahulSharma-qth]

Excellent ...Loved it ...way you teach is Exemplary

[JameelAhmed-pbii]

Great video, you definitely made things for easy me. Thanks!

[vivektherockstar]

gr8 explanation u have made NAT easy to Thanks for session ..

[asadarain]

Excellent, clear and succinct Explanation of a much messed up topic on ASA.

Two Quick questions

@14:30. Wouldn't it consume more ASA resources if you place most general rules in the bottom of section-3, as for every LAN IP ASA will have to start looking for a rule from the top of section-1 until it finds a rule at the bottom of Section-3 ?

Second, What is it called, and how could we NAT Multiple Inside Servers with single Public IP Address ?

[ameenahmedu]

Excellent explanation.. Thank you.. You have cleared many of my questions today..

[techleo]

Rohit you're great at Explaining technologies. Thanks for your videos!!! Can you please do a video about FHRP that would be really helpful?

[gabizhum]

Thank you so much, Rochit, awsome awesome explanation !!!

[umiseaz]

execellent tutor !! great demo and explanation

[bodstrup]

Have been looking at a number of NAT articles - in vain - this is the first time I feel I understand how it really works. Thanks a lot. Could you please do a feature on NAT when having VPN access to the Inside network ? - Split tunneling under anyconnect vs. NAT - we need both (I think) ?

[saadtalani]

This is really create explanation, Thanks a lot!

[SApcGUY]

This was a nice refresher. Thanks Rohit. So just one thing, if I do a source nat (inside, outside) src-object dst-object - is this bidirectional automatically assuming I have the access-rules set up on my outside interface to allow the DNAT?

[vijays]

great explation n detail thanks for sharing knowledge : QN can i know in old asa code & new asa code how acls and nat behave as u alredy mentioned can u explain that

[ccsmooth]

With Manual NAT, isnt NAT Divert a consideration? For instance, at the end of the lesson Manual Rule 1 would cause all traffic that sources from Webserver2 (inside) to be immediately diverted to the Outside interface, even if it was trying to contact a device on another interface right? In this case shouldnt we put an identity NAT in there to avoid that situation? This is why you have to be careful with Manual NAT because you can inadvertently divert traffic because the NAT rules override the global routing table.

[oskarnorman]

if you just have on public adress on the outside interface and you have many server in DMZ that needs to be reachable from outside ? you said that static pat is not bidirectional

[aries]

INE, I hope you are listening. Please have Rohit do the Advanced technologies class for the new CCIE security exam. Please no more European instructors with bad accent.