from my PC to the Web. I had a download running through a web browser, plus a few web pages open. The last entry is a static translation resulting from the static configuration entered earlier. To clear xlates, use the clear xlate command: ASA-5540#clear xlate When you clear xlates, every session on the firewall will be broken and will need to be rebuilt. If your ASA is protecting an ecommerce website, transactions will be broken and customers may become unhappy. You should not clear xlates unless there is a valid reason. While the clear xlate command runs with no fanfare on the ASA, every connection will be cleared. My IM client reset, and the download I had running aborted as a result of the xlates being cleared. Another useful command for troubleshooting is show conn, which shows all of the active connections on the ASA: ASA-5540#sho conn 8 in use, 199 most used TCP out 10.233.161.147:80 in LAB-PC2:1151 idle 0:00:18 Bytes 6090 flags UIO TCP out 10.46.109.49:1863 in LAB-SVR1:1736 idle 0:03:28 Bytes 7794 flags UIO TCP out 10.188.8.176:5190 in LAB-PC2:4451 idle 0:00:52 Bytes 32827 flags UIO Troubleshooting TCP out 10.120.37.15:80 in LAB-PC:1789 idle 0:00:03 Bytes 19222477 flags UIO TCP out 10.120.37.15:80 in LAB-PC:1802 idle 0:00:02 Bytes 20277173 flags UIO TCP out 10.172.118.250:19093 in LAB-SVR2:80 idle 0:00:09 Bytes 11494 flags UIOB TCP out 10.172.118.250:19075 in LAB-SVR2:80 idle 0:00:09 Bytes 219866 flags UIOB UDP out 10.67.79.202:123 in RTR1:123 idle 0:00:32 flags - This command shows the protocol, direction, source, and destination of each connec- tion, as well as how long each connection has been idle and how many bytes have been sent. The flags are very useful, if you can remember them. You can view the entire list of flags along with a different format of the same data by appending the detail keyword to the command. This example was generated a few minutes later than the previous one: ASA -5540# sho conn detail 4 in use, 4 most used Flags: A - awaiting inside ACK to SYN, a - awaiting outside ACK to SYN,