Help on Port Forwarding Cisco ASA

[john]

Hello All,

we are trying to port forward  exchange (which is working fine)

obj network EXCHANGE

host 172.16.17.14

  nat(inside,outside) static interface service tcp smtp smtp

access-list EXCHANGE_in extended permit tcp any object EXCHANGE eq smtp

access-group EXCHANGE_in in interface outside

------

but when i add another port forwarding for OWA

obj network OWA

host 172.16.17.14

  nat(inside,outside) static interface service tcp https https

access-list OWA_in extended permit tcp any object OWA eq https

access-group OWA_in in interface outside

i can access OWA, but sending/receiving emails fail.

PLEASE ADVISE.

Regards,

John

[Dennis Mink]

I think what is happening is that when you add the second object called OWA, with the same IP as the EXCHANGE object, that is when you break connectivity.

use a single obbject for 172.16.17.14 and call it MAIL for instance static NAT the MAIL object for smtp and https instead of trying it with 2 different objects.

Please rate if helpful