# CISCO ASA: How to NAT in both directions?

**URL:** <https://forum.networklessons.com/t/cisco-asa-how-to-nat-in-both-directions/738>\
**Category:** ASA\
**Created:** [October 11, 2016, 1:14am UTC](https://forum.networklessons.com/t/cisco-asa-how-to-nat-in-both-directions/738 "2016-10-11T01:14:46Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![steven.passenier](https://cdn-forum.networklessons.com/letter_avatar_proxy/v4/letter/s/919ad9/32.png) [@steven.passenier](https://forum.networklessons.com/u/steven.passenier)\
**Post date:** [October 11, 2016, 1:14am UTC](https://forum.networklessons.com/t/cisco-asa-how-to-nat-in-both-directions/738/1 "2016-10-11T01:14:46Z")

</div>

Hi all,

I am not able to figure out the best method to NAT because there are so many options..  
In ASDM \> When do I use “add object wth NAT option” and when do I use “add NAT rule”

for example:  
I would like to set up an FTP server (DMZ) and give it its own IP on the OUTSIDE + The FTP server needs to see the IP of the FW (and not original source)

thanks in advance,  
S

PS: Which tool do you use to create the topology picture?

---

<div class="post-metadata">

**Author:** ![steven.passenier](https://cdn-forum.networklessons.com/letter_avatar_proxy/v4/letter/s/919ad9/32.png) [@steven.passenier](https://forum.networklessons.com/u/steven.passenier)\
**Post date:** [October 20, 2016, 8:14am UTC](https://forum.networklessons.com/t/cisco-asa-how-to-nat-in-both-directions/738/2 "2016-10-20T08:14:58Z")

</div>

testing done.  
Please remove my post.

---

<div class="post-metadata">

**Author:** ![lagapidis](https://cdn-forum.networklessons.com/user_avatar/forum.networklessons.com/lagapidis/32/4949_2.png) [@lagapidis](https://forum.networklessons.com/u/lagapidis)\
**Post date:** [October 29, 2016, 8:24am UTC](https://forum.networklessons.com/t/cisco-asa-how-to-nat-in-both-directions/738/3 "2016-10-29T08:24:50Z")

</div>

Hello Steven.

From my understanding, you have answered your question. It would be great if you could share your finding on the forum.

I look forward to hearing your solutions.

Laz

---

<div class="post-metadata">

**Author:** ![steven.passenier](https://cdn-forum.networklessons.com/letter_avatar_proxy/v4/letter/s/919ad9/32.png) [@steven.passenier](https://forum.networklessons.com/u/steven.passenier)\
**Post date:** [March 29, 2017, 5:48pm UTC](https://forum.networklessons.com/t/cisco-asa-how-to-nat-in-both-directions/738/4 "2017-03-29T17:48:07Z")

</div>

Hi,  
I have asked this question at my official asa course.  
“there is no difference and has the same result, only a different way to set it up”

And NAT seems to be automatically in both directions :s  
The FW started listening on the IP and arp replying.

br  
Steven