topic Re: ssh on web server ec2 instance in trust subnets in VM-Series in the Public Cloud

ssh on web server ec2 instance in trust subnets

dhakad-rakesh — Mon, 06 May 2019 13:32:00 GMT

I have deploy vm series 2.0 firewall template and application template on aws. Also deploy Bastion jump server for ssh. I'm able to ssh access of vm series instance but unable to ssh on web server instance in private subnets.

Please guide me, how can I'm able to ssh on webserver.

Re: ssh on web server ec2 instance in trust subnets

dleitzel — Mon, 06 May 2019 13:59:39 GMT

Routing should not be an issue if all of the devices are in the same VPC. The routing for the packets from the bastion directly to ip address of the web server will be direct across the fabric and will not pass thru the firewall. Typically the issue will be the security group on the web server not allowing SSH (port 22) access into the web server.

If you want to have that traffic pass thru the firewall, you will have to create NAT polices inside the FW. You will need to NAT both SRC and DST addesses to insure symetrical flows of traffic to be thru the firewall.

Re: ssh on web server ec2 instance in trust subnets

dhakad-rakesh — Mon, 06 May 2019 15:06:32 GMT

I already added ssh 22 in security group, but still can't access to web server.

Re: ssh on web server ec2 instance in trust subnets

dleitzel — Mon, 06 May 2019 15:10:40 GMT

Which web server have you loaded? Are you sure the server can accept an SSH connection?

Re: ssh on web server ec2 instance in trust subnets

dhakad-rakesh — Mon, 06 May 2019 15:17:40 GMT

Yes, Opened port 22 in security group

Re: ssh on web server ec2 instance in trust subnets

dleitzel — Mon, 06 May 2019 15:19:34 GMT

I was refering to the server software you call web server. What is it, Linux, Windows?? Also is this from marketplace or something you have built.

Re: ssh on web server ec2 instance in trust subnets

dhakad-rakesh — Mon, 06 May 2019 15:53:27 GMT

Its Amazon ecs-optimized AMIsLinux