We have a dedicated interface on our ASA that is used for our guest wireless. The guest wireless is using our ISP for their DNS. The issue we are having is we want users on the guest wireless to be able to get to our website (located on our DMZ), and our Citrix server (located on inside). When someone on the guest subnet tries to get to the website it resolves to it's NAT'd public IP but they cannot access it. How can I make this work?
