Multiple servers under one DMZ

Unanswered Question
Oct 14th, 2007

Hi all!

is it possible for ASA or PIX firewall to handle multiple servers under its DMZ interface? Example, we have only one outside ip address and we have 6 servers inside the DMZ. is it possible to access every server coming from outside using this one outside ip address? we have one email server, 2 web server and the rest are some other servers. is this posible? if yes, can you give me a link or tutorial on how can i configure the firewall so that it can handle this instances.


I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
kevin.jones1 Sun, 10/14/2007 - 19:17

Yes, it is possible. You just have

place those servers behind an F5 BigIP

that will do the load balancing for you.

on the ASA, you do a port-redirect

static(dmz,outside) tcp interface 80 x.x.x.x 80 netmask

where x.x.x.x is the ip address of the BigIP

Virtual IP (VIP).


This Discussion