NAT address inbound and outbound

[ohareka70]

Hello,

I have a new server on my dmz which needs external access to a public IP address outbound over tcp/2001

I also need external users to be able to hit this server externally inbound over https

I have setup an external dns called server.mydomain.com using an external static NAT and this worked ok

i used the same NAT to get outbound access to the public ip and have firewall rules in and routing for this but it wont connect.  Do i need to use a different NAT address and should the NAT address be hide/static nat

[Rob Ingram]

Hi,
You'll need to configure a static nat for the server in the dmz and then the appropriate access-list. I am assuming you are using ASA 9.x
E.g.

object network DMZ-SRV
host 192.168.10.5
nat (inside,outside) static 1.1.1.10

access-list OUTSIDE_IN permit tcp any host 192.168.10.5 eq 443
access-list IN_OUTSIDE permit tcp host 192.168.10.5 any eq 2001

HTH