Installing a pix without a NAT funcionnality

[i-masmoudi]

I installed a PIX-515 to protect our WEB Server fron the Internet. The employees in the private zone connects also to the WEB Server. The WEB server is in a DMZ.

The WEB Mester looks for statisctics on the utilization of the WEB Server (Number of connections, number of differents users, etc.).

So, I Have to disable the Adress translation (PAT:Global Command) from the private side to the DMZ Side and to allow the private adressess (10.0.0.0) to be countered by the WEB Server.

Have you got an idea how to do this.

Thanks.

[nsteup]

Hi

Do the "nat 0" command to establish communication from inside to DMZ. Write an ACL for communication between WEB-Server and inside hosts to establish traffic back from WEB Server to inside.

Regards Norbert