topic need help with RDP access to any host on DMZ from Inside network in Network Security https://community.cisco.com/t5/network-security/need-help-with-rdp-access-to-any-host-on-dmz-from-inside-network/m-p/1620310#M604697 <P>deleted fixed</P> Mon, 11 Mar 2019 19:25:58 GMT nssaustin 2019-03-11T19:25:58Z need help with RDP access to any host on DMZ from Inside network https://community.cisco.com/t5/network-security/need-help-with-rdp-access-to-any-host-on-dmz-from-inside-network/m-p/1620310#M604697 <P>deleted fixed</P> Mon, 11 Mar 2019 19:25:58 GMT https://community.cisco.com/t5/network-security/need-help-with-rdp-access-to-any-host-on-dmz-from-inside-network/m-p/1620310#M604697 nssaustin 2019-03-11T19:25:58Z Re: need help with RDP access to any host on DMZ from Inside net https://community.cisco.com/t5/network-security/need-help-with-rdp-access-to-any-host-on-dmz-from-inside-network/m-p/1620311#M604698 <HTML><HEAD></HEAD><BODY><P>Hi,</P><P></P><P>To allow communication from inside to DMZ in this case you use static for the translation:</P><P></P><P>static (inside,dmz) inside inside netmask 255.255.0.0</P><P></P><P>And allow the traffic on the ACL:</P><P></P><P>access-list inside-outbound extended permit tcp any host sftp eq 3389</P><P></P><P>So, it seems you have the configuration...</P><P>If it does not work do the following test:</P><P></P><P>packet-tracer input inside tcp 1.1.1.1 1025 2.2.2.2 3389</P><P></P><P>The above will show us if the packets are being dropped by the ASA for some reason.</P><P>Assuming 1.1.1.1 is the real IP of the inside host accesing the DMZ host 2.2.2.2</P><P></P><P>Federico.</P><P></P><P></P><P><SPAN class="content"></SPAN></P></BODY></HTML> Tue, 21 Dec 2010 19:10:23 GMT https://community.cisco.com/t5/network-security/need-help-with-rdp-access-to-any-host-on-dmz-from-inside-network/m-p/1620311#M604698 Federico Coto Fajardo 2010-12-21T19:10:23Z