Monitor WS from inside/outside/dmz.

[tmcmillion]

We have a monitoring program that we want to run on a server that sits inside and monitor the the nat'ed outside address of our Web server that sits in the DMZ. We want to do it this way so it follows the same path our customers use to the get to the app servers.

The normal beahvior for this is to connect to the WS from insdie directly to the DMZ address. What can I do to change this or is it possible?

[markturner]

You could try..(real addr of dmz server = 10.0.0.1)

static (,inside) 10.0.0.1 200.1.1.1 netmask 255.255.255.255 0 0

clear xlate

Check you have statics for this server for both the outside and dmz interfaces.

You won't be able to talk to this server with it's real address from the inside.

Let me know if this works as I haven't a pix handy to test.

Regards,

Mark

[mostiguy]

I don't think that will work - there is no way for the data to follow the same path that your customers' will. If you really want it to mimic your customers', you will need an offsite monitoring solution.

[tmcmillion]

Thanks for your input, I didn't think it was possible just wanted some other opinions.