ASA 5510 DMZ creation

[vipinrajrc]

Hi,

I need to implement a DMZ in my office. Before talking about the configuration , i would like to know best practises of implementing DMZ.

My questions are

1) is traffic from inside to DMZ is permit by default?

2) What about DMZ to Inside traffic ?

3) Is it necessary to do a NAT from inside to DMZ with the same IP as of inside

4) What is the use of " static (inside,dmz) 192.168.1.0 192.168.1.0 netmask 255.255.255.0 ? is it a no nat statement?

5) Is it necessary to permit traffic from DMZ to inside?

6) Suppose i have a web server in DMZ, for inside host whether it will take path through ASA or path through internet?

Please share your advices

Thanks

Vipin

[varrao]

I am not sure about Trend Micro, but if it has to go to some other server on the internet for updates, then it woudl use the ports mentioned above.

Varun

[vipinrajrc]

Hi,

Thanks I will check and update. thanks for your help.....................

Vipin

[varrao]

Sure let me know if you face any issues

Thanks,

Varun