We have an ASA 5540. I issued the command "sh run nat-c" and it comes back "no nat control'. From my understanding this means that traffic should pass through the firewal w/o nat transaltion. The problem is that I couldn't ping from one subnet to antoher, and the subnets are out different interfaces on the ASA. As soon as I put in a nat exempt statement in the ASA on the source interface it worked fine. Why would this be if the "no nat control" command is issued?? Thanks for your help.