Cisco ASA 5520 no outbound HTTP to internet

So i am having a bizare issue that is really annoying and I know its simple but to no avail...

Have a Cisco 5520 firewall at

10.232.5.26  (internal interface)

I am testing from a PC (10.232.5.115) that I have set the default gateway (on the same LAN) to 10.232.5.26
and I am unable to surf the internet going out the ASA form this PC.

I have added (for testing only) a rule any/any outbound http allow...but for some reason its not working.
I see a Built conneciton and a teardown to the WWW address in question but nothign else works...

Thoughts?
LVL 1
rsvsolutionsAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

JFrederick29Commented:
Did you configure NAT on the ASA?

conf t
global (outside) 1 interface
nat (inside) 1 0 0

Did you configure a default route on the ASA to your ISP?

route outside 0 0 x.x.x.x   <--next hop to ISP
0
rsvsolutionsAuthor Commented:
I have this:

global (External) 1 interface
nat (Internal) 0 access-list Internal_nat0_outbound
nat (Internal) 1 0.0.0.0 0.0.0.0

I do have the route out

route External 0.0.0.0 0.0.0.0 206.208.206.1 1


Still get nothing....
0
JFrederick29Commented:
Can you post your NAT 0 access-list - access-list Internal_nat0_outbound
0
The Firewall Audit Checklist

Preparing for a firewall audit today is almost impossible.
AlgoSec, together with some of the largest global organizations and auditors, has created a checklist to follow when preparing for your firewall audit. Simplify risk mitigation while staying compliant all of the time!

rsvsolutionsAuthor Commented:
access-list Internal_nat0_outbound extended permit ip any VPN-CLIENT-POOL 255.255.255.0
access-list Internal_nat0_outbound extended permit ip object-group DM_INLINE_NETWORK_7 any
0
JFrederick29Commented:
Okay, need one more piece of information, can you post the contents of DM_INLINE_NETWORK_7.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
rsvsolutionsAuthor Commented:
DOH! i found it
I had my insides exempt from NAT!
0
JFrederick29Commented:
Yes sir.  Exactly what I was getting at <8-]
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Hardware Firewalls

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.