cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
723
Views
0
Helpful
6
Replies

Windows Media Server on DMZ - Need assistance

npagadua69
Level 1
Level 1

Hello - I have a Windows Media Server on my DMZ. What i am trying to do is have the WMS server communicate with my SQL server on my inside network and vice versa and for some reason i can't get to WMS server from the inside. can you please look at my config and tell me what issue i'm having.

6 Replies 6

acomiskey
Level 10
Level 10

static (inside,dmz) 192.168.0.0 172.16.0.0 netmask 255.255.0.0 0 0

should be...

static (inside,dmz) 192.168.0.0 192.168.0.0 netmask 255.255.0.0 0 0

Jon Marshall
Hall of Fame
Hall of Fame

Hi

I can't view the visio but from your config i think the problem is the following line:-

static (inside,dmz) 192.168.0.0 172.16.0.0 netmask 255.255.0.0 0 0

What is this line meant to be doing ?

lets say your SQL server was 192.168.0.56 then you would need

static (inside,DMZ) 192.168.0.56 192.168.0.56 netmask 255.255.255.255

This will setup the correct translations for your SQL server to talk to the WMS and vice-versa.

HTH

Jon

npagadua69
Level 1
Level 1

will the configuration i have will enable me to ping and perform security updates from my inside network? sorry guys, i a bit new to pix firewall.. any help would be great

Hi

If you need other servers internally to talk to your DMZ servers go with what the other poster said

static (inside,DMZ) 192.168.0.0 192.168.0.0 netmask 255.255.0.0

You would still need to allow any traffic initiated from the DMZ to the inside in an access-list.

HTH

Jon

npagadua69
Level 1
Level 1

i need to allow traffic from the DMZ to my inside interface so that the server can get MS updates. can you please let me know what im missing with my config?

As long as you have changed the static as recommended above, you need to add entries to your access list which is applied in interface dmz, which according to your config is "ping_acl". If you're talking about a WSUS server it would be something like...

access-list ping_acl permit tcp host host eq 80

access-group ping_acl in interface dmz

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: