<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<META content="MSHTML 6.00.2800.1607" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV><FONT face=Arial size=2>hi</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>i have just started to read snpa book. the question
is:</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>1- </FONT><FONT face=Arial size=2>can higher
security level (100) interface can access lower security level interface without
a NAT transalation? </FONT></DIV>
<DIV><FONT face=Arial size=2>2- I setup my asa with 2 interfaces (inside and
outside) and tried to ping from an inside host to an outside host but it failed.
</FONT></DIV>
<DIV><FONT face=Arial size=2>3- For an inside host to access an outside host do
we need translation or access rule or both?</FONT></DIV>
<DIV><FONT face=Arial size=2>4- Do we need to have an inspect icmp in inspection
policy for number 1 to work without a transaltion and access rule or
both?</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>PS: I know that this a not a security related forum
but there are lots of people here who are skilled in different
domain.</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>regards,</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>Khalid</FONT></DIV></BODY></HTML>