recommended approach from DMZ to Inside

[kunal-united]

Hi,

What is the recommended approach for the traffic from DMZ to Inside

1. Do you apply access-list from lower security to higher OR

2. Do you apply NAT

Any other views for the traffic pattern security are most welcomed.

Thanks,

Kunal

[varrao · Accepted solution]

Hi Kunal,

You woudl definitely need an ACL when you are going from dmz to inside.

Nat depends, if you have a nat-control enabled then you woudl need it, other wise not. But if you are accessing any server on its public ip then you would need nat, irrespective of if you have nat-control or no nat-control

How to check nat-control:

show run nat-control.

Hope that helps.

Thanks,

Varun