5516-X: Allowing traffic from web server on separate ISP to internal private network on a specific port

[R4L]

Hey all.

We're experiencing difficulty allowing traffic from our outside web server's public IP to our internal SQL server on a specific port, on our 10.10.10.1 private network. We have web services for our customers to use that interface through IIS 10 on our web server, to our internal SQL server on our primary ISP. On our 1941 ISR we set up a static NAT rule for this and it worked just fine. On the ASA however, connections are being dropped in production and while testing using packet tracer.

We have defined a dynamic NAT for inside to outside, set a static NAT on the inside interface to allow the web server's public IP using that specific port, and defined an ACL as well, but each time has resulted in a failure. What can I look for that we haven't done yet?

[balaji.bandi]

we would like to see the configuration that you have configured - do ASA have reachability to local IP 10.10.10.1 ?

here is an example guide :

https://www.cisco.com/c/en/us/td/docs/security/asa/asa90/configuration/guide/asa_90_cli_config/nat_objects.html

[R4L]

See attached for the edited config.