ASA5505 with base license - access from dmz to internal

[acleri]

Hi,

we have a cisco ASA5505 with base license and 3 interface configured.

Internal 192.168.1.1/24

DMZ 172.16.0.1/24

Outside 20.20.20.20/24

The DMZ is configured to allow the traffic pass to the outside interface only (base license allow only traffic to one interface) in order to let clients on this network to browse internet.

On the outside interface there's a nat configuration that let the port 443 to be natted to an in internal server.

Is it possible to let the clients in DMZ to access to the internal server on port 443 from the outside interface?

Thank you for your help.

[mvsheik123]

No. You need to upgrade the license so that DMZ and Inside can communicate directly..

hth

MS

[acleri]

access from dmz to internal need to the license upgrade but I would like to allow traffic from dmz to outside and then nat the traffic to inside, is it possible?

[mvsheik123]

I would like to allow traffic from dmz to outside and then nat the traffic to inside, is it possible?

Thats your question in Main posting. The answer is 'No'.