topic Re: Connection from outside to Inside Server in General Topics

Connection from outside to Inside Server

MP18 — Thu, 14 Mar 2019 17:28:19 GMT

We have specific device that has public IP and need to connect to Server inside our network

That server has private IP address and that address is not in any physical interfaces of the firewall.

Need to know how can I allow the connection from this specific Public IP to the server private IP?

Re: Connection from outside to Inside Server

OtakarKlier — Thu, 14 Mar 2019 21:03:41 GMT

Hello,

You will need a NAT policy for the translation and a Security policy to allow the traffic.

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000CllzCAC

Hope that helps.

Re: Connection from outside to Inside Server

MP18 — Thu, 14 Mar 2019 21:29:24 GMT

need to confirm below

That server has private IP address and that address is not in any physical interfaces of the firewall.

Re: Connection from outside to Inside Server

OtakarKlier — Thu, 14 Mar 2019 21:31:47 GMT

Yep thats ok as long as the firewall knows how to get to the IP.

Example:

Internet --> 1.1.1.1 --> firewall --> 192.168.1.1 (server) and the fiirewall doesnt have either of those IP's on an interface. As long as the ISP is sending 1.1.1.1 to the PAN, the PAN will know what to do based on the NAT and Security policies.

Re: Connection from outside to Inside Server

MP18 — Fri, 15 Mar 2019 18:07:43 GMT

Many thanks worked great