topic Re: DMZ Web Server Access Setup in General Topics

DMZ Web Server Access Setup

cpatte7372 — Sun, 15 May 2016 13:53:32 GMT

Hello Community,

I have set up a lab environment shown in the below below that is meant to allow access from 192.168.1.X to the sever 10.2.2.1 using static NAT ip address 192.168.1.251

I have configured everything as demonstrated in the CBT Nugget see below for the NAT and Security Policies

However, the policy wont

Re: DMZ Web Server Access Setup

cpatte7372 — Sun, 15 May 2016 14:58:00 GMT

Sorry, I didn't finish the last sentence...

I meant to say the policy won't alllow me to open up the browser on the server. The strange thing is the policy isn't denying me access.

Any help will be greatly appreciated.

Cheers

Carlton

Re: DMZ Web Server Access Setup

cpatte7372 — Sun, 15 May 2016 14:59:33 GMT

Please see attached logs from monitor.. hopefully this will help you help me...

Re: DMZ Web Server Access Setup

cpatte7372 — Sun, 15 May 2016 18:13:57 GMT

Anyone able to help with this please?

Re: DMZ Web Server Access Setup

BenjAudy.MTL — Mon, 16 May 2016 03:47:11 GMT

Hi,

On Server 1, do you have a route to let traffic going back to 192.168.1.0/24? A default route maybe?

Benjamin

Re: DMZ Web Server Access Setup

santonic — Mon, 16 May 2016 06:39:43 GMT

Also check if service is listening on port 80 or if there is some local fw on server.

Re: DMZ Web Server Access Setup

Ozamir — Mon, 16 May 2016 08:04:20 GMT

Hey,

So, from the logs you can see that "bytes recieved" is "0",

You can also see that NAT is taking place,

Means L2 or L3 issue.

Try and check the arp tables on both the PC and NGFW.

Re: DMZ Web Server Access Setup

cpatte7372 — Mon, 16 May 2016 10:51:41 GMT

Ozamir,

Thanks for responding.

Can you direct me to samples of DMZ access to webserver from the Internet?

Regards