setting up services to be accessible through the internet

[socfocus.com]

I am wanting to have one of my internal machines be a webserver and be allowed to talk out through the internet.

Not sure how to go about doing this.

[gswcowboy]

Let's say your server is in the trust zone.

Nat Policy (destination nat)

   from L3_Untrust;

        source any;

        to L3_Untrust;

        to-interface  ;

        destination 199.3.215.103; <== Public IP of your server

        service tcp/any/any;

        translate-to "dst: 172.16.20.7";

Sec Policy

from L3_Untrust;

        source any;

        source-region any;

        to L3_Trust;

        destination 199.3.215.103; <== Public IP of your server

        destination-region any;

        user any;

        category any;

        application/service[ ssl/any/any/any web-browsing/any/any/any ];

        action allow;