Local 192.168.1.100 (3088) PAT Global 10.0.0.5(1215) Local 192.168.1.100 (3094) PAT Global 10.0.0.5(1213) Local 192.168.1.100 (3092) PAT Global 10.0.0.5(1212) Local 192.168.1.100 (3091) PAT Global 10.0.0.5(9324) Local 192.168.1.110 (1127) PAT Global 10.0.0.5 (1047) Local 192.168.1.100 (2958) Global 10.0.0.11 Local 192.168.1.11 The PAT Global entries are live connections from my PC to the Web. I had a down- load running through a web browser, plus a few web pages open. The last entry is a static translation resulting from the static configuration entered earlier. To clear xlates, use the clear xlate command: PIX# clear xlate When you clear xlates, every session on the firewall will be broken, and will need to be rebuilt. If your PIX is protecting an e-commerce web site, transactions will be broken, and customers may become unhappy. Clearing xlates should not be done unless there is a valid reason. While the clear xlate command runs with no fanfare on the PIX, every connection has been cleared. Now the output of the show xlate command shows only the single static entry: PIX# sho xlate 1 in use, 114 most used Global 10.0.0.11 Local 192.168.1.11 My IM client reset, and the download I had running aborted as a result of the xlates being cleared. Another useful command for troubleshooting is show conn, which shows all of the active connections on the PIX: PIX# sho conn 8 in use, 199 most used Troubleshooting TCP out 10.233.161.147:80 in LAB-PC2:1151 idle 0:00:18 Bytes 6090 flags UIO TCP out 10.46.109.49:1863 in LAB-SVR1:1736 idle 0:03:28 Bytes 7794 flags UIO TCP out 10.188.8.176:5190 in LAB-PC2:4451 idle 0:00:52 Bytes 32827 flags UIO TCP out 10.120.37.15:80 in LAB-PC:1789 idle 0:00:03 Bytes 19222477 flags UIO TCP out 10.120.37.15:80 in LAB-PC:1802 idle 0:00:02 Bytes 20277173 flags UIO TCP out 10.172.118.250:19093 in LAB-SVR2:80 idle 0:00:09 Bytes 11494 flags UIOB TCP out 10.172.118.250:19075 in LAB-SVR2:80 idle 0:00:09 Bytes 219866 flags UIOB UDP out 10.67.79.202:123 in RTR1:123 idle 0:00:32 flags - This command shows t