Cisco ASA Dynamic NAT Configuration

Hello Surendra

As with many marketing documents, this text is using general language to describe the operation of their product. By no means should this statement be taken as an exact description of their “TFA” algorithm. The statement

“it monitors the empirical behaviors on the network and lets administrators know which rules they can create to allow only the necessary access”

is imprecise and does not give us enough information to know what is actually being applied to traffic.

Cisco’s packet processing algorithm for the ASA that you have posted here, however, is very precise. So it is difficult to compare the process of one product with another with such a generalized description.

If you want to compare them, you will have to find technical documentation for the product that describes the process precisely.

Having said that, the description does tell us that the product possesses some level of intelligence that allows it to analyze traffic and make determinations based on traffic type and traffic volume. What those determinations are and how they are reached are unknown at this point.

I hope this has been helpful!

Laz