topic pix 515 dmz access in Network Security

pix 515 dmz access

timeguardian — Fri, 21 Feb 2020 08:58:45 GMT

helo

i have a problem and perhaps someone can help me

i have a pix 515E win 3 interfaces

2 servers are linked in the DMZ with 10.0.0.2 and 10.0.0.3

the 10.0.0.3 has 192.168.0.3 in the inside via static

how can i from 10.0.0.2 access the 192.168.0.3 server (not 10.0.0.3 !!!) ?

thanks

Re: pix 515 dmz access

Patrick Laidlaw — Sat, 17 Jun 2006 20:57:12 GMT

Hello,

So to understand you clearly you have used a static so that people on the inside can hit 192.168.0.3 to get to the 10.0.0.3 server. You would like to find out if your 10.0.0.2 can user the 192.168.0.3 address to talk to the 10.0.0.3 server. Below is the way the traffic would flow to accomplish what your asking.

10.0.0.2 DMZ -> Inside 192.168.0.3 Inside -> DMZ 10.0.0.3

The answer is you will not be able to do this. PIX's do not allow you to travers from one interface and terminate traffic on a different interface.

Patrick

Re: pix 515 dmz access

timeguardian — Sun, 18 Jun 2006 09:49:46 GMT

thanks for the prompt answer

is there any trick so i can rewrite the request ?? so that if anyone calls from the dmz the 192.168.0.3 server my pix rewrites the request in 10.0.0.3 ??? or how can i do that because i need to do that instead of modifying my network