topic Not really apart from access in Network Security

Publish Proxy IP

mohamed sebaey — Tue, 12 Mar 2019 05:45:55 GMT

Hello

I am going to publish free proxy on my network , i did static nat to allow my firewall to permit public ip address to my Proxy which located on DMZ.

static (DMZ,outside) XXX.XX.XX.XXX XX.X.XXX.XX netmask 255.255.255.255

Any configuration should be applied to allow my ASA 5510 to allow proxy server get access to internet .

Hi Mohamed,I have removed the

amchang — Mon, 13 Apr 2015 22:26:01 GMT

Hi Mohamed,

I have removed the public ip address details from your original post as this type of information should not be posted to the community. They are replaced with XXX.XXX.....

Thanks.

Not really apart from access

Pranay Prasoon — Tue, 14 Apr 2015 03:36:32 GMT

Not really apart from access-list.

Need to make sure that for outbound we don't have access-list on DMZ interface,where implicit deny will drop traffic. Going from higher to lower security doesn't need to have access-list to allow traffic but, if you already have one , it shouldn't deny.

For inbound traffic, yes you definitely need one.

Thanks

Hello I already applied

mohamed sebaey — Thu, 16 Apr 2015 05:09:02 GMT

Hello

I already applied access list on DMZ , as below

ip access-list DMZ permit ip host x.x.x.x any // where x.x.x.x is the DMZ server//

Any idea

thanks