I seem to be forced to use NAT

[Jmorgan1413_2]

Hi,

I am trying to access a Citrix Web Interface server connected to the DMZ interface on my ASA 5510.

The only way I can get it to work is by setting up a static NAT for the Web Server. I don't want to have to do this. I want to be able to access it by it's correct IP address.

When I remove the NAT rules, I can't acces the server, but when I set up the static NAT I can access it and everything works fine.

Am I going to be forced to use NAT for any servers on the DMZ? Or am I just missing something fairly simple here?

Config attached.

Thanks,

John Morgan

[tcscadmin]

Remove your static NAT rule and put:

nat (DMZ) 0 CITRIXSERVERIP 255.255.255.255

or host CITRIXSERVERIP if your PixOS release supports it.

[tcscadmin]

Double Post. Sorry.