Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

ISA 570 ACCESS FROM DMZ TO SMTP SERVER ON DEFAULT_LAN

I have a smtp server in dmz zone and access from wan with port forwarding. This smtp server will access another smtp server in default_lan

how can I create the nat rules for access?

Thank

Aondio Carlo

1 ACCEPTED SOLUTION

Accepted Solutions

ISA 570 ACCESS FROM DMZ TO SMTP SERVER ON DEFAULT_LAN

Access Rule:

From Zone:  DMZ

To Zone:  Default_LAN

Services:  SMTP (TCP 25)

Source Address:  DMZ SMTP Server IP

Destination Address:  Default_LAN SMTP Server IP

Schedule:  Always On

Match Action:  Permit

You do not need to create an Access Rule to allow traffic from the Default_LAN to the DMZ SMTP server as it will be allowed by default.

Shawn Eftink
CCNA/CCDA

Please rate all helpful posts and mark correct answers to assist others searching for solutions in the community.

Shawn Eftink CCNA/CCDA Please rate all helpful posts and mark correct answers to assist others searching for solutions in the community.
1 REPLY

ISA 570 ACCESS FROM DMZ TO SMTP SERVER ON DEFAULT_LAN

Access Rule:

From Zone:  DMZ

To Zone:  Default_LAN

Services:  SMTP (TCP 25)

Source Address:  DMZ SMTP Server IP

Destination Address:  Default_LAN SMTP Server IP

Schedule:  Always On

Match Action:  Permit

You do not need to create an Access Rule to allow traffic from the Default_LAN to the DMZ SMTP server as it will be allowed by default.

Shawn Eftink
CCNA/CCDA

Please rate all helpful posts and mark correct answers to assist others searching for solutions in the community.

Shawn Eftink CCNA/CCDA Please rate all helpful posts and mark correct answers to assist others searching for solutions in the community.
342
Views
0
Helpful
1
Replies