cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2602
Views
0
Helpful
4
Replies

NetScaler with Cisco ASA for Web DMZ

Rupesh Kashyap
Level 1
Level 1

Hi, I have to design my DMZ. I am using Cisco ASA, Netscaler for that.

On the front end, I am using Cisco ASA 5440 having Public IP on outside & Private IP on DMZ interface.

I am connected Netscaler to DMZ interface of ASA. I will activate Private IP on both interfaces of Netscaler & would activate Static NAT of ASA for public IP which are registered with ISP.

I want to know, is it mandatory to enable Public IP on outside interface of Netscaler ? Or NAT on ASA for public IP will also work?

4 Replies 4

Rupesh Kashyap
Level 1
Level 1

pls help champs.

Ganesh Hariharan
VIP Alumni
VIP Alumni

Hi, I have to design my DMZ. I am using Cisco ASA, Netscaler for that.

On the front end, I am using Cisco ASA 5440 having Public IP on outside & Private IP on DMZ interface.

I am connected Netscaler to DMZ interface of ASA. I will activate Private IP on both interfaces of Netscaler & would activate Static NAT of ASA for public IP which are registered with ISP.

I want to know, is it mandatory to enable Public IP on outside interface of Netscaler ? Or NAT on ASA for public IP will also work?

Hi Rupesh,

If firewall is the front end for outside world then better and safe option you apply nat for private ip address of the netscaler and permit rule as per the requirement in ASA.

Hope to help

If helpful do rate the post

Ganesh.H

Thanks man.

I want to know one thing, like I will configure Static NAT on ASA which will convert Public IP to Private IP.

Is it possible to use Private IP on the outside interface of Netscaler or CSS which should work like VIP (Virtual Server IP)?

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: