I am new to ASA firewall. I have ASA 5520 firewall (hardware) I want my clients in my Local network to gain internet access through the firewall. So it should be like this: ISP to Billion modem to Firewall (hardware) to Switch to client.

  • 1
    What is your question? I have read the question several times, but I don't find an actual question.
    – Ron Maupin
    Nov 2, 2016 at 14:53
  • I want the clients in my network to gain internet access through the firewall.
    – Jaz
    Nov 2, 2016 at 15:42
  • OK, that is a statement of your goal, but what is your specific question? You need to edit the question with your question, and include the sanitized ASA configuration, pointing out where you think you have gone wrong.
    – Ron Maupin
    Nov 2, 2016 at 15:45

1 Answer 1


though your question is really vague I think you should do source NAT for internet access for your clients (aka MASQUERADE)

imagine your client network with a subnet mask of

you should config this with CLI (supposing you have configured everthing else such as interfaces and security-levels etc) :

object network myclients
 nat (inside,outside) dynamic interface

reference :http://www.cisco.com/c/en/us/td/docs/security/asa/asa83/configuration/guide/config/nat_objects.html

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.