Can't access DMZ web server from Internet

[jkrawczyk]

Hi;

I have the following config on my 3 interface PIX but I cannot access DMZ address 65.213.200.17 from Internet. 172.30.14.11 is my DMZ web server and I allow only https.

access-list OUTSIDE_IN permit any host 65.213.200.17 eq 443

static (DMZ, outside) 65.213.200.17 172.30.14.11 netmask 255.255.255.255

access-group OUTSIDE_IN in interface outside

Please advise to what I’m missing or doing incorrectly.

Thank you kindly

Jeff

[vkapoor5]

In the first line of your config, the keyword 'tcp' is missing.

Also you should check the routing part. Can you access other hosts on the DMZ from the internet, provided you have allowed access through PIX? Check if the Webserver default gateway is configured correctly. Check any access-list on the inside interface. Is your webserver running "https" on the port 443?