I can not Access internet from inside server nated behind Firewall

[bashiru.bayonle]

Hello all,

i have a linux server nated on firewall with port redirection. After the below config i am able to access the server via shh and as well the URL on the server is opening fine but from the server i cannot access the INTERNET!. I cannot ping universal DNS, Google etc. Traffic initiated to internet is not going while traffic is coming in from internet. Can someone help with what is missing in this config below that is on the firewall

object-group service PROD_101 tcp
port-object eq 8443
port-object eq 922
port-object eq ssh
port-object eq https
port-object range 8000 8200

access-list Outside_IN extended permit tcp any object PROD_LOCAL object-group PROD_101

nat (PRODUCTION,OUTSIDE) source static PROD_LOCAL PROD_PUBLIC service TCP-SOURCE-22 TCP-SOURCE-22
nat (PRODUCTION,OUTSIDE) source static PROD_LOCAL PROD_PUBLIC service TCP-SOURCE-8000_8200 TCP-SOURCE-8000_8200

nat (PRODUCTION,OUTSIDE) static PROD_PUBLIC service tcp 9443 https
access-group Outside_IN in interface OUTSIDE
route OUTSIDE 0.0.0.0 0.0.0.0 x.x.x.x

[dimayouN2]

what version you are running ? are other hosts able to go out ?

~Younes

[bashiru.bayonle]

ASA Version 9.1(2)

The other host with only NAT is able to go out to internet with below config:

object-group service TEST_APPS tcp
port-object eq ssh
port-object eq 922
port-object range 8000 8200
port-object eq www

access-list Outside_IN extended permit tcp any object TEST_PRIVATE object-group TEST_APPS

object network TEST_PRIVATE
nat (TEST,OUTSIDE) static TEST_PUBLIC_16.241

[bashiru.bayonle]

I just resolved the issue now!!!..

I edited the static NAT as this :

object network PROD_LOCAL

host x.x.x.x

nat (PRODUCTION,OUTSIDE) static PROD_PUBLIC

and added this twice NAT :

object service TCP-8443
service tcp source eq 8443


object service TCP-HTTPS
service tcp source eq https

nat (PRODUCTION,OUTSIDE) source static PROD_LOCAL PROD_PUBLIC service TCP-8443  TCP-HTTPS