User's Manual

Firewall
Configuring the NAT Rules to Securely Access a Remote Network
Cisco ISA500 Series Integrated Security Appliance Administrator Guide 197
6
NOTE Port triggering is not appropriate for servers on the LAN, since the LAN device must
make an outgoing connection before an incoming port is opened. In this case, you
can create port forwarding rules for this purpose.
STEP 1 Click Firewall -> NAT -> Port Trigger.
The Port Trigger window opens. All existing port triggering rules are listed in the
table.
STEP 2 To enable a port triggering rule, check the box in the Enable column.
STEP 3 To add a new port triggering rule, click Add.
Other options: To edit an entry, click Edit. To delete an entry, click Delete. To
select multiple entries, check the boxes of multiple entries and click Delete
Selection.
After you click Add or Edit, the Port Triggering - Add/Edit window opens.
STEP 4 Enter the following information:
• Description: Enter the name for the port triggering rule.
• Trigger Service: Choose an outgoing TCP or UDP service.
• Opened Service: Choose an incoming TCP or UDP service.
If the service you want is not in the list, choose Create a Service to create a
new service object. To maintain the service objects, go to the Networking -
> Service Management page. See Service Management, page 154.
STEP 5 Click OK to save your settings.
STEP 6 Click Save to apply your settings.
Configuring Advanced NAT Rules
Advanced NAT allows you to identify real addresses and real ports for address
translation by specifying the source and destination addresses.