Lower security interface to Higher Security interface

[idodd]

Has anyone got example config on how to pass traffic from a lower security interface (15) to the Inside interface (100), I have tried a number of config's however they all seem to remove the implicit outbound rule which then stops all my customers working.

Many thanks

[johnbroadway]

Hi,

I usualy set up a static address translation between the interfaces and then use a conduit or access list to permit the traffic, e.g.

static (dmz,outside) 192.202.100.133 10.20.100.133 netmask 255.255.255.255 0 0

conduit permit tcp host 192.202.100.133 eq smtp any

Hope that helps

John

[idodd]

John,

I'll give it a whirl thanks