PIX and NAT destination IP

[oguarisco]

Hi,

Could someone tell me if PIX do the NAT translation of the IP destination address when a packet travels from a higher level interface (inside) to a lower one (dmz)???

I've thought to use a static mapping, but as it is used on opposite of my traffic direction, it could open potentially services to enter from the dmz to the inside if someone gain access of the servers on the DMZ...isn't it ???

Thanks

[oguarisco]

Hi guys,

I've find out an interesting document that provide help on my problem using:

- DNS Doctoring

or

- Dnat

take a look: http://www.cisco.com/en/US/partner/products/hw/vpndevc/ps2030/products_tech_note09186a0080094aee.shtml#int