topic Re: Cannot connect to internal network device using https with P in Network Security

Cannot connect to internal network device using https with PIX 506e

theplace — Mon, 11 Mar 2019 11:33:09 GMT

I have set up a SSL concentrator on my internal network with a fixed ip address, this device is accessed using https. It works fine on our internal network. Then on my PIX 506e I have configured a static route from the external ip address to the internal address and then an access rule to allow https traffic to the external address. When I go to https://external ip, I am not able to connect to the network device. Any ideas what I am doing wrong? See below for relevant config:

access-list outside_access_in permit tcp any host xxx.xxx.xxx.236 eq https

static (intf2,outside) xxx.xxx.xxx.236 SSL netmask 255.255.255.255 0 0

Everything has been configured via the GUI and saved to flash.

Re: Cannot connect to internal network device using https with P

jmia — Tue, 20 Nov 2007 14:13:04 GMT

Try...

access-list outside_access_in permit tcp any host xxx.xxx.xxx.236 eq https

access-group outside_access_in in interface outside

static (intf2,outside) tcp xxx.xxx.xxx.236 https https netmask 255.255.255.255 0 0

save with: write mem

And also issue: clear xlate

Hope it helps, pls rate posts if it does.

Re: Cannot connect to internal network device using https with P

theplace — Wed, 21 Nov 2007 23:28:32 GMT

Thanks for your help. I have made the changes, but still no luck. I cannot connect to the device externally via telnet, ping or https.

Any other suggestions, I am using a PIX 506e with PIX version 6.3(4).

Cheers

Andy