Firewall communication issue

[Ge Qu]

Hi, 

I have Nagios resides in the firewall DMZ with security level 99, and want to monitor the inside interface which has security level 30,  but I am not able to. 

I am kinda new to firewall, i am not sure if this is something to do with the firewall's security level or the nature of the firewall?

Thank you.

[Karsten Iwen]

On the ASA you have to access the nearest interface which is the DMZ interface in your case. It's by design of the ASA that you can't access remote interfaces.

[Ge Qu]

Hi Karsten,

Thank you for your reply.

So what you mean is, if my nagios is resides in DMZ, and i cannot reach out the inside interface to check the firewall status, by design, i need to check the DMZ interface to check the firewall status?

Did I understand you correctly?

[Karsten Iwen · Accepted solution]

Yes, that's exactly what you have to do.