DMZ setup. Net from inside?

[NInja Black]

Hi,

 I was trying to configure a DMZ on our firewall for a webserver.

Our topology is  ...  Internet > Router 3925 > ASA5525 > Switch(inside LAN)

I have an interface on the ASA connected to the DMZ switch. ASA5525 > DMZ switch > Web server. The ACEs for the DMZ permit only tcp/https traffic.

The NATing is on the router for the WServer access from outside.

Do I need to configure a NAT statement for access from inside? Or the URL (Linked to the public ip address) will work from the inside too?

Hope my question is clear.

[turbo_engine26]

Hi,

I recommend to post this issue in the 'WAN, Routing and Switching' topic in the 'Network Infrastructure' section.

I am really sorry but i can't help you with this.

AM

[NInja Black]

No problem AM.

Thanks again for the DMZ issue. Big help!!!