Hi,

Outside interface DNS servers.

thanks

Hi, there is our network sample configuration that is worked fine.

Outside) Public network IP 202.20.1.0/24

(Inside) Pivate 192.168.100.0/24

*** Public IP 202.20.1.10 www nat map to private IP 192.168.100.10 www

access-list OUTSIDE extended permit tcp any host 202.20.1.10 eq www

!--- Simple access-list that permits HTTP access to the mapped

!--- address of the WWW server.

global (outside) 1 interface

nat (inside) 1 192.168.100.0 255.255.255.0

static (inside,outside) 202.20.1.10 192.168.100.10 netmask 255.255.255.255 dns

!--- PAT and static NAT configuration. The DNS keyword instructs

!--- the security appliance to rewrite DNS records related to this entry.

access-group OUTSIDE in interface outside

!--- The Access Control List (ACL) that permits HTTP access

!--- to the WWW server is applied to the outside interface.

policy-map type inspect dns MY_DNS_INSPECT_MAP

parameters

message-length maximum 512

!--- DNS inspection map.

policy-map global_policy

class inspection_default

inspect dns MY_DNS_INSPECT_MAP

!--- DNS inspection is enabled using the configured map.

sample network diag

Thanks for the example cofig and diagram, I have attached a layout of what I am trying to achieve, if company 1 send an email to company 2 it fails, or browses a web page hosted by the other company. I want the 2 companies to be separate although they are both using the same ASA.

Jim

Thanks

Jim