dmz

[carl_townshend]

Hi all , if I set up a pix, can all internal users access the dmz fully, but you have to open up any web inbound traffic to it ?

[mahmoodmkl]

Hi

yes they can access but before that make sure u define nat on dmz interface.

Thanks

Mahmood

[danielmassey]

Hi Carl,

To Access from Inside interface to Outside or DMZ we need to do (nat or no nat)/global command (Higher Security Zone to Lower Security Zone always permited )

To Access from Outside or DMZ to Inside we need to configure Static Nat and Access-list (Lower Security Zone to Higher Security Zone always blocked)

Rgd

Danny

[carl_townshend]

So can anyone show me a simple setup for this ? is things in the dmz always natted for outside access, but you can use the real address when coming from the inside ?

[spremkumar]

Hi Carl

Hope this helps..

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00800941c8.shtml

regds