topic Re: PIX 515e - cannot view site from inside in Network Security

PIX 515e - cannot view site from inside

stevensavage — Fri, 21 Feb 2020 07:32:44 GMT

hi folks

I have a PIX 515E with a webserver in the DMZ. Using a static command it is on the web with an internet address and can be viewed from anywhere outside the firewall. But users inside cannot view it, by ip address or domain name. Would be grateful for any help on an access list for this

Thanks

Re: PIX 515e - cannot view site from inside

mike-greene — Wed, 04 Aug 2004 15:34:05 GMT

Hi,

1. Try putting a static from the DMZ to Inside using the inside subnet...

static (inside,DMZ) netmask

2. Are you using ACL's or conduits? If you are then make sure your not blocking access to that server.

Hope that helps.

Re: PIX 515e - cannot view site from inside

stevensavage — Wed, 04 Aug 2004 15:47:31 GMT

Hey there

1 - Have this already in place

2 - Using ACLS. I can access the website on the webserver from the lan using its DMZ address, but not its internet address. And i don't want to setup a www DNS entry for it locally to the DMZ because it should work the other way!

Thanks

Re: PIX 515e - cannot view site from inside

mike-greene — Wed, 04 Aug 2004 16:21:47 GMT

Woops...

I did not understand how you wanted this setup...

This should work....

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a0080094aee.shtml#dmz

Re: PIX 515e - cannot view site from inside

stevensavage — Wed, 04 Aug 2004 16:35:03 GMT

That will do the job nicely Mike - Thanks for your prompt help