topic Hi,Thank you for sharing the in Network Security

Client behind asa cannot access to hosted domain.

sokmeng.min — Tue, 12 Mar 2019 04:56:14 GMT

Dear Supporter,

I need you help me to solve this issue. I have a web-server in my office, I want to access to my web server from outside via domain name, so I have registered with Godady by convert my public ip to www.domain-name.com, after that I can access my web-server from outside via www.domain-name.com, but unluckily I and all client inside my office cannot access to my web-server via www.domain-name.com. I thinks that the problem is on asa, so try to fix by googling and other documents, but did not solve my problem. So can you please help me on this?

Please check diagram as in attachment file.

Thank in advance and Best regard,

Hi,It should be a simple U

Vibhor Amrodia — Thu, 16 Oct 2014 05:32:09 GMT

Hi,

It should be a simple U Turn NAT on the ASA device to redirect the traffic for the domain Name back inside to the Web Server. At this moment the request from the clients are trying to go to the Public IP of the server which will not work without the NAT statement in place.

Which version are you using ?

Thanks and Regards,

Vibhor Amrodia

Dear Mr.,Thanks you for your

sokmeng.min — Thu, 16 Oct 2014 07:06:47 GMT

Dear Mr.,

Thanks you for your reply. Currently I used Ciscco ASA 5512-X version 9.1 firmware. This is NAT which I using in ASA:

object network web-server-https
host 10.10.17.2

access-list outside_acl_in extended permit tcp any host 10.10.17.2 eq https

object network web-server-https
nat (inside,outside) static interface service tcp https https

If possible can you give a sample configuration or documents to fix this issue?

Thanks in advance and Best regard,

Hi,Thank you for sharing the

Vibhor Amrodia — Thu, 16 Oct 2014 08:34:14 GMT

Hi,

Thank you for sharing the configuration.

This should be the required configuration:-

object network web-server-https-1
host 10.10.17.2

nat (inside,inside) source dynamic any interface destination static interface web-server-https-1

Try this and let me know if this works

Thanks and Regards,

Vibhor Amrodia