topic Re: DMZ servers unable to reach internet in Network Security https://community.cisco.com/t5/network-security/dmz-servers-unable-to-reach-internet/m-p/1990894#M434666 <HTML><HEAD></HEAD><BODY><P><BR />asa</P></BODY></HTML> Thu, 07 Jun 2012 16:24:15 GMT fadarekehinde 2012-06-07T16:24:15Z DMZ servers unable to reach internet https://community.cisco.com/t5/network-security/dmz-servers-unable-to-reach-internet/m-p/1990892#M434664 <P>I had the ip address conflict problem on the dmz network, i removed proxyarp on the dmz interface on the firewall it sorted it. Another issue i am experiencing right now is that my natted DMZ servers are unable to reach the internet. what could be responsible?</P> Mon, 11 Mar 2019 23:16:34 GMT https://community.cisco.com/t5/network-security/dmz-servers-unable-to-reach-internet/m-p/1990892#M434664 fadarekehinde 2019-03-11T23:16:34Z DMZ servers unable to reach internet https://community.cisco.com/t5/network-security/dmz-servers-unable-to-reach-internet/m-p/1990893#M434665 <HTML><HEAD></HEAD><BODY><P>Can you post your config?</P></BODY></HTML> Thu, 07 Jun 2012 16:17:51 GMT https://community.cisco.com/t5/network-security/dmz-servers-unable-to-reach-internet/m-p/1990893#M434665 colquist 2012-06-07T16:17:51Z Re: DMZ servers unable to reach internet https://community.cisco.com/t5/network-security/dmz-servers-unable-to-reach-internet/m-p/1990894#M434666 <HTML><HEAD></HEAD><BODY><P><BR />asa</P></BODY></HTML> Thu, 07 Jun 2012 16:24:15 GMT https://community.cisco.com/t5/network-security/dmz-servers-unable-to-reach-internet/m-p/1990894#M434666 fadarekehinde 2012-06-07T16:24:15Z Re: DMZ servers unable to reach internet https://community.cisco.com/t5/network-security/dmz-servers-unable-to-reach-internet/m-p/1990895#M434667 <HTML><HEAD></HEAD><BODY><P>Are these the only servers in the DMZ:</P><P></P><P>SMTPserver</P><P>IAG </P><P>10.13.199.24</P><P>BNG_UAG_INT</P><P></P><P>If there are more, then you will need a nat (dmz) 1 statement for them as well.</P></BODY></HTML> Thu, 07 Jun 2012 16:43:50 GMT https://community.cisco.com/t5/network-security/dmz-servers-unable-to-reach-internet/m-p/1990895#M434667 deyster94 2012-06-07T16:43:50Z Re: DMZ servers unable to reach internet https://community.cisco.com/t5/network-security/dmz-servers-unable-to-reach-internet/m-p/1990896#M434668 <HTML><HEAD></HEAD><BODY><P>try adding the following two lines to the end of your DMZ ACL</P><P></P><P>access-list dmz-in extended deny ip 10.0.0.0 255.0.0.0 10.0.0.0 255.0.0.0</P><P>access-list dmz-in extended permit ip any any</P></BODY></HTML> Thu, 07 Jun 2012 16:44:59 GMT https://community.cisco.com/t5/network-security/dmz-servers-unable-to-reach-internet/m-p/1990896#M434668 colquist 2012-06-07T16:44:59Z Re: DMZ servers unable to reach internet https://community.cisco.com/t5/network-security/dmz-servers-unable-to-reach-internet/m-p/1990897#M434669 <HTML><HEAD></HEAD><BODY><P> These are the servers we have for now and creating more on the Hyper-v. i will try that as well.</P></BODY></HTML> Thu, 07 Jun 2012 16:49:05 GMT https://community.cisco.com/t5/network-security/dmz-servers-unable-to-reach-internet/m-p/1990897#M434669 fadarekehinde 2012-06-07T16:49:05Z