DMZ to outside

[jdickey]

We have a situation where we have traffic coming in a DMZ that needs to reach a VPN concentrator that is on the outside of the firewall (FWSM 2.3). We cant seem to get the traffic to pass through the firewall. We have put in the appropriate routes and a static (dmz,outside) command to take care of the NAT. is there something i am missing? thanks.

[jilahbg]

Hello

Besides NAT and routes, You must also make sure that the traffic is allowed in the ACL applied to the dmz-interface. Otherwise it won´t even get into the pix.

Regards Jimmy