ASA policy-nat is working but acl is not hit

Question

Hope you guys can help explain why is it working this strange. Thank you.
access-list NET1 permit ip host 10.1.2.27 10.76.5.0 255.255.255.224
static (inside,outside) 192.168.100.100 access-list NET1
ciscoasa(config)# show access-list
access-list NET1 line 1 extended permit ip host 10.1.2.27 10.76.5.0 255.255.255.224 (hitcnt=0) 0x19580e75
ciscoasa(config)# show xlate
3 in use, 4 most used
Global 192.168.100.100 Local 10.1.2.27
ciscoasa(config)# show nat
NAT policies on Interface inside:
  match ip inside 10.1.2.27 255.255.255.255 outside 10.76.5.0 255.255.255.224
    static translation to 192.168.100.100
    translate_hits = 9, untranslate_hits = 28

Answer 1

Hi,
It seems as if this is the behavior with access lists that are associated with NAT. I did a few checks around the support forums and found that this could be the issue and there isnt anything to worry about. However if you can move this thread to the firewalling community I am sure they will be able to confirm this for you.
Tarik Admani
*Please rate helpful posts*