ASA 5520 and NATING OF VLANS

[prakavi]

Hi,\

our organization is using ASA 5520  as firewall.The inside interface of the firewall is on core switch  and the default route on core switch is pointing towards the inside interface of the firewall.There are several vlans on core switch  and the routing is done on the firewall for the vlans. Users under vlan use a proxy server to  access the internet.Some of the users  are  using static NAT   outside to have internet without the proxy.

Our e-mail server is sitting in  DMZ .The NATED  users are not able to access  the mail server through outlook.If the vlan is not NATED  no issues.Looking for a solution.

Regards

[Marius Gunnerud]

Where is the Exchange server located?

Does the URL used to configure outlook resolve to a public IP?

Where is the DNS server located?

--

Please remember to select a correct answer and rate helpful posts

[prakavi]

Hi,

It is not an Exchange server  but  sun mail server sitting at DMZ. We have  numerous vlans   inside .like  192.168.2.0,  192.168.3.0 etc. mail  server  sitting in dmz with an ip  192.168.1.2 for example. Local dns cannot reslove  to public. url used to configure outlook  points towards the local ip. suppose one vlan is nated  with a public ip to  get internet  without using proxy  that particular vlan is not able  to access   the mail server via out look though the server can be  be telneted at at port 25.

[Marius Gunnerud]

Hmm, interesting.  Any chance you could post your full ASA running config (sanitised)?  Please add the NAT command that is causing the connection issues also.

--

Please remember to select a correct answer and rate helpful posts