Understanding NAT and NAT Rule Order (ASA 8.3/8.4 First of all, there is no such thing as ‘nat-control’ any more so you either define a NAT or you don’t. Traffic that does not match any NAT rules will be allowed to bypass the firewall without any translation (like NAT exemption but without explicitly configuring it, more … More Understanding NAT and NAT Rule Order (ASA 8.3+)