Contents
iv
Cisco ASA Series Firewall CLI Configuration Guide
Applying Inspection and Connection Limits to HTTP Traffic to Specific Servers 1-20
Applying Inspection to HTTP Traffic with NAT 1-21
Feature History for Service Policies 1-22
CHAPTER
2Configuring Special Actions for Application Inspections (Inspection Policy Map) 2-1
Information About Inspection Policy Maps 2-1
Guidelines and Limitations 2-2
Default Inspection Policy Maps 2-3
Defining Actions in an Inspection Policy Map 2-4
Identifying Traffic in an Inspection Class Map 2-5
Where to Go Next 2-7
Feature History for Inspection Policy Maps 2-7
PART
2Configuring Network Address Translation
CHAPTER
3Information About NAT 3-1
Why Use NAT? 3-1
NAT Terminology 3-2
NAT Types 3-3
NAT Types Overview 3-3
Static NAT 3-3
Information About Static NAT 3-3
Information About Static NAT with Port Translation 3-4
Information About One-to-Many Static NAT 3-5
Information About Other Mapping Scenarios (Not Recommended) 3-6
Dynamic NAT 3-7
Information About Dynamic NAT 3-7
Dynamic NAT Disadvantages and Advantages 3-8
Dynamic PAT 3-8
Information About Dynamic PAT 3-8
Per-Session PAT vs. Multi-Session PAT 3-9
Dynamic PAT Disadvantages and Advantages 3-9
Identity NAT 3-10
NAT in Routed and Transparent Mode 3-10
NAT in Routed Mode 3-11
NAT in Transparent Mode 3-11
NAT and IPv6 3-13
How NAT is Implemented 3-13