ASA with public DMZ

bargerjc8 · ‎03-27-2007

I'm installing an ASA 5505. I have public IPs for both the DMZ and the outside interface. Do I still need to set up some sort of address translation through the ASA or will it automatically go through to the DMZ? For example, if someone on the internet wants to get to the webserver in my DMZ, it already has a public address, do I need to do anything special on the ASA to direct it there?

Thanks.

sundar.palaniappan · ‎03-27-2007

Yes, you still need a static translation for the outside users to access the server on the DMZ.You can use the actual web server address in the (dmz, outside) translation. You also need to apply access list on the outside interface, assuming it has lower security than DMZ, to allow access to the web server.

Here's an example that you may find helpful;

http://www.cisco.com/en/US/products/ps6120/products_getting_started_guide_chapter09186a00805e2922.html

HTH

Sundar