Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Hi all,Help for a newbie please.I have a problem with the inside network accessing web servers in the DMZ. I am getting portmap translation fail errors, however I need help with the command to allow all inside hosts access to the DMZ. It's a new fi...
Hi all,I have not yet resolved my NAT issues from the DMZ to the inside network, been working on other projects but would like to have my DMZ functional so I can roll back the loose security policy I have.I would like to enable all DMZ hosts to be ab...
Is that not covered by the rules:access-list dmz_access_in extended permit tcp any any access-list dmz_access_in extended permit udp any any access-group dmz_access_in in interface dmz
I don't believe it is possible.You can however create a static NAT rule on the inside interface so it seems to have more than one IP address.What is the purpose of this?
Thanks for your help, I have changed the config as per below. I have a host at address 192.168.200.2/24 in the dmz. For it to access inside addresses do I need to add individual nat entries for each server it accesses?Also the inside network can no...