Multiple servers under one DMZ

[cmadiam82]

Hi all!

is it possible for ASA or PIX firewall to handle multiple servers under its DMZ interface? Example, we have only one outside ip address and we have 6 servers inside the DMZ. is it possible to access every server coming from outside using this one outside ip address? we have one email server, 2 web server and the rest are some other servers. is this posible? if yes, can you give me a link or tutorial on how can i configure the firewall so that it can handle this instances.

Tnx!!!

[kevin.jones1]

Yes, it is possible. You just have

place those servers behind an F5 BigIP

that will do the load balancing for you.

on the ASA, you do a port-redirect

static(dmz,outside) tcp interface 80 x.x.x.x 80 netmask 255.255.255.255

where x.x.x.x is the ip address of the BigIP

Virtual IP (VIP).

[cmadiam82]

tnx....