We have a spare ASA 5506-X that we want to use as a NAT. It will be placed between a VLAN and a machine network. Is it possible to setup the device using only the wizard for this functionality. (I have installed the programming interface and I'm trying to setup the system using the setup wizard). I only want to use it as NAT and not as a Firewall, so everything should just pass through. Is it enough to set the outside to security 100 and then just use the NAT tab?

1 Answer 1


Yes, you can do this.

Be aware that, by default, ASA permits traffic from higher security-level interface to lower security-level interface. Therefore you must set the security level for both interfaces correctly for traffic to pass through.

  • So would setting both outside and inside =100 be sufficient to ensure all traffic passes through?
    – DavyGravy
    Commented Jan 25, 2018 at 18:04
  • 1
    @DavyGravy You should not set the same security level for inside and outside interfaces. In case you do that, you would need an additional command 'same-security-traffic permit inter-interface'
    – Hung Tran
    Commented Jan 26, 2018 at 9:10
  • Thanks for that, does that also apply for 2 different subnets assigned to inside network objects?
    – DavyGravy
    Commented Jan 27, 2018 at 9:40

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.