I have a Pix 515e with a Inside, Outside, and DMZ network. To support users in the field we have setup a few dialin modems on the DMZ . My problem is when users dialin to the DMZ and receive a DMZ IP address, they then try to connect to a web server that is hosted on my internal network. Since I have a NAT rule setup for this server the users from the DMZ cannot use the address server.domain.com from the DMZ since they are already inside. It seems that since they are already on the DMZ and they try to access a server that has a static NAT rule the PIX does not know how to route it. If they access the server by inside ip (192.x.x.x) it works no problem. They MUST access by server.domain.com. How do I enable a user on the DMZ access to do this?
Start Free Trial