topic DMZ Access (Strange Issue) in Network Security

DMZ Access (Strange Issue)

rbaeditores — Mon, 11 Mar 2019 22:04:32 GMT

Hello,

We can´t reach DMZ servers from other DMZ servers. It's very strange.

If I make a ping from DMZ server to another, sometimes only recieve one ping, sometimes 4, sometimes 0.

How can I allow the traffic between DMZ servers??

(ASA 5520 Version 8.4)

Regards

DMZ Access (Strange Issue)

raga.fusionet — Wed, 21 Dec 2011 13:25:54 GMT

Chris are we talking about servers that are on the same DMZ or two different DMZs?

You said that sometimes it works sometimes it doesnt, it sounds like a problem on the client side, have you checked for faulty NICs, cabling, or even duplicated IP addresses?

What happens on the ASA if you debug icmp trace while trying to ping?

Thanks,

Raga

DMZ Access (Strange Issue)

puseth — Thu, 22 Dec 2011 21:50:21 GMT

Chris,

If the source and destination are behind a Same DMZ interface and they are connected on a L2 switch, these packets should be routed b/w them from this Switch and packets should not go the the ASA.

Sometimes in cases of ASA doing proxy arp these packets can go to the ASA.

Can you take the output of arp -a from the Server when you can ping the other server fine and when you cannot.

Puneet