I do not understand the connection between your first and second sentences. However, I assuming that your webserver is on DMZ, inside users should get access to webserver without any specific configuration on pix. Let me know if your question is related to something else.