These are processed in the order in which they appear in the configuration. The three sections of the ASA NAT table are: Section 1 How the ASA Configuration is Used to Build the NAT Policy TableĪll packets processed by the ASA are evaluated against the NAT table. The network objects used in the NAT configuration are too broad, which causes traffic to inadvertently match these NAT rules, and miss more specific NAT rules.For example, a manual NAT rule is placed at the top of the NAT table, which causes more specific rules placed farther down the NAT table to never be hit. The NAT configuration rules are out of order.When you troubleshoot NAT configurations, it is important to understand how the NAT configuration on the ASA is used to build the NAT policy tableīelow is the most common problem faced while working in NAT rules : In this topic, I will talk about the NAT process and how to troubleshoot it if it is not working on ASA.