Unable to access web server of DMZ Zone from Inside interface

[saroj pradhan]

Hi,

please  help  me to  resolve  the issue.  i have  created  a DMZ  Zone   Network  with  public  IP Addresses.

i have  created   Identity   nat  for  DMZ  Network  access the internet.  The  server  in the DMZ  Is  accessable  from  Internet.

To  access the server  from  inside  interface  created  ACE and  NAT exampt  . Able  to ping  and   trace  the  DMZ Server  from  Inside interface  but  unable  to  open  page  or  access the web  server from  inside interface.

please  guide  to resolve  the issue.

Regards,

Saroj

[Mark Graham]

check your logs, they offer quite an extensive reason to blocking.   

my guess is your DMZ  policy is blocking it.  remember, all interfaces with a higher security level are blocked from internal interfaces (level 0) by default.

edit:  use the packet tracer program as well thats bundled in the asa.   you can preform these tasks under ASDM as well as under CLI   

[saroj pradhan]

Hi,

i run a packet  trace but  not  showing any  block.please find the report encloesd.

Regards,

Saroj