Cisco Systems and the ASA Services Module Network Router User Manual


 
Contents
iv
Cisco ASA Series Firewall CLI Configuration Guide
Applying Inspection and Connection Limits to HTTP Traffic to Specific Servers 1-20
Applying Inspection to HTTP Traffic with NAT 1-21
Feature History for Service Policies 1-22
CHAPTER
2 Configuring Special Actions for Application Inspections (Inspection Policy Map) 2-1
Information About Inspection Policy Maps 2-1
Guidelines and Limitations 2-2
Default Inspection Policy Maps 2-3
Defining Actions in an Inspection Policy Map 2-4
Identifying Traffic in an Inspection Class Map 2-5
Where to Go Next 2-7
Feature History for Inspection Policy Maps 2-7
PART
2 Configuring Network Address Translation
CHAPTER
3 Information About NAT 3-1
Why Use NAT? 3-1
NAT Terminology 3-2
NAT Types 3-3
NAT Types Overview 3-3
Static NAT 3-3
Information About Static NAT 3-3
Information About Static NAT with Port Translation 3-4
Information About One-to-Many Static NAT 3-5
Information About Other Mapping Scenarios (Not Recommended) 3-6
Dynamic NAT 3-7
Information About Dynamic NAT 3-7
Dynamic NAT Disadvantages and Advantages 3-8
Dynamic PAT 3-8
Information About Dynamic PAT 3-8
Per-Session PAT vs. Multi-Session PAT 3-9
Dynamic PAT Disadvantages and Advantages 3-9
Identity NAT 3-10
NAT in Routed and Transparent Mode 3-10
NAT in Routed Mode 3-11
NAT in Transparent Mode 3-11
NAT and IPv6 3-13
How NAT is Implemented 3-13