Would there be a reason for being able to access a VIP on a CSS11501 fron inside a firewall on the same subnet, but not being able to access it beyond the firewall from a client PC off location? The firewall is configured correctly, ports 80,443 are open for HTTP and HTTPS. I have configured a allow all traffic ACL for my VLAN. I can access the service IP's from outside, but not the VIP.
Why is the CSS allowing me access the IP's of the web servers, but not the VIP? Does NATing have anything to do with it?