Cisco FirePOWER ASA 5500 series Configuration Manual page 12

Contents
Applying NAT
17
C H A P T E R
Cisco Security Appliance Command Line Configuration Guide
xii
Adding an Extended Access List
Extended Access List Overview
Allowing Special IP Traffic through the Transparent Firewall
Adding an Extended ACE
Adding an EtherType Access List
Adding a Standard Access List
Adding a Webtype Access List
Simplifying Access Lists with Object Grouping
How Object Grouping Works
Adding Object Groups
Adding a Protocol Object Group
Adding a Network Object Group
Adding a Service Object Group
Adding an ICMP Type Object Group
Nesting Object Groups
Using Object Groups with an Access List
Displaying Object Groups
Removing Object Groups
Adding Remarks to Access Lists
Scheduling Extended Access List Activation
Adding a Time Range
Applying the Time Range to an ACE
Logging Access List Activity
Access List Logging Overview
Configuring Logging for an Access Control Entry
Managing Deny Flows
17-1
NAT Overview
17-1
Introduction to NAT
17-2
NAT Control
17-3
NAT Types
17-5
Dynamic NAT
17-5
PAT
17-6
Static NAT
17-7
Static PAT
17-7
Bypassing NAT when NAT Control is Enabled
Policy NAT
17-9
NAT and Same Security Level Interfaces
16-5
16-5
16-6
16-8
16-9
16-10
16-10
16-10
16-11
16-11
16-12
16-12
16-13
16-14
16-15
16-16
16-16
16-16
16-17
16-17
16-18
16-18
16-18
16-19
16-20
17-12
16-6
17-8
OL-10088-01