topic Having trouble connecting from dmz to outside in Network Security

Having trouble connecting from dmz to outside

malam1969 — Tue, 12 Mar 2019 06:08:37 GMT

Hello:

We have a Cisco ASA 5512 running software version 9.1(1)

I am trying to connect from a host in the dmz to the outside and from outside to the host in dmz. I thought its a pretty straight forward configuration, but for some reason, my pings from the dmz host to the outside is not successful. If you can take a look at the configuration below and let me know what i am missing, i would surely appreciate it.

Thank you in advance.

NAT configuration:

object network DMZ-subnet
subnet 172.23.11.0 255.255.255.0
nat (DMZ,outside) dynamic interface
object network DMZ-host-EXT
host X.X.46.171
object network DMZ-host-INT
host 172.23.11.11
nat (DMZ,outside) source static DMZ-host-INT DMZ-host-EXT

Access-list:

access-list outside_access_in extended permit ip any object DMZ-host-INT
access-group outside_access_in in interface outside

Hi

Henrik Grankvist — Thu, 18 Jun 2015 06:50:55 GMT

The only thing I see is that "DMZ-host_INT" needs to be removed from the NAT-statement.

object network DMZ-host_INT
 nat (DMZ,outside) source static DMZ-host-EXT

hi,the info you gave is

johnlloyd_13 — Thu, 18 Jun 2015 06:54:17 GMT

hi,

the info you gave is insufficient.

able to post sanitized config?

Are you inspecting ICMP in

Adeolu Owokade — Thu, 18 Jun 2015 13:09:15 GMT

Are you inspecting ICMP in the default MPF configuration?