topic Re: https access blocked from dmz to inside in Network Security

https access blocked from dmz to inside

tyr668 — Sun, 02 Jul 2023 09:37:02 GMT

hi guys ,

why can't my pc surf https of the web server in dmz , but it can for port 80. i've tried almost every combination but it still doesn't work. when i did a simluation of the packet , it reaches the web server but when going back to the firewall, it stops at the firewall.

Re: https access blocked from dmz to inside

Flavio Miranda — Sun, 02 Jul 2023 09:48:10 GMT

Hi @tyr668

Try this way:

access-group allow_web in interface dmz
access-group allow_web out interface dmz
access-group allow_web in interface inside
access-group allow_web out interface inside

Re: https access blocked from dmz to inside

tyr668 — Sun, 02 Jul 2023 10:12:30 GMT

still can't access via https , but can access via http

Re: https access blocked from dmz to inside

Flavio Miranda — Sun, 02 Jul 2023 10:17:45 GMT

Can you share the project and I can take a look?

Re: https access blocked from dmz to inside

tyr668 — Sun, 02 Jul 2023 10:24:09 GMT

sure , here's the folder

Re: https access blocked from dmz to inside

MHM Cisco World — Sun, 02 Jul 2023 10:27:35 GMT

Change http server with new one'

It can bug

Re: https access blocked from dmz to inside

Flavio Miranda — Sun, 02 Jul 2023 10:33:04 GMT

From where to where are you testing exactly?

Re: https access blocked from dmz to inside

tyr668 — Sun, 02 Jul 2023 10:36:30 GMT

the internal pcs to dmz web server

Re: https access blocked from dmz to inside

Flavio Miranda — Sun, 02 Jul 2023 11:27:54 GMT

The attached file is working.

I made changes on the firewall. Take mine and yours and compare please.