Connect to internal webservers from behind a pix 501

Posted on 2005-04-11
Last Modified: 2011-09-20

I have read over a lot of you guys post and it has really helped me with the learning process of my pix 501. So here is my situation:

I have a series of webservers behind a pix 501 (6.3). They are all accessable from the outside. I can acess them from the inside using there internal address; however if i try to access them from inside with the external address I can't access it. Exp:

ok: ------>
--------------              ---------------------------------
| Internet   | ------> |port 80|
--------------              ---------------------------------
won't work: --------> ------------>
----------------------    ---------------------------     ----------------------------    ----------------
|Internal Network |->|Internet DNS Server   |->|Pix 501|->||
----------------------     ---------------------------    ----------------------------    ----------------

This needs to be done for a few reasons: one, users on our network need to give demos via live meeting using the domain name of the server (not an internal address). The second is if the web-page does a redirection like below it fails. redirects to

I have sort of gotten around it the first problem by adding entries to the host file in windows. But I need to real solution. Thanks for all your thoughts guys.

Question by:BoB7869
    LVL 19

    Accepted Solution

    The alias command will work for you in this situation - it sets up DNS doctoring:

    Logon to PIX

    conf t
    alias (inside) X.X.X.X Y.Y.Y.Y

    Where X.X.X.X is the LAN ip address of the webserver and Y.Y.Y.Y is the public ip of it

    Here is a link that explains it further:


    Author Comment

    Thanks! That seems to work. I do need to do further testing but it looks like it will solve it.

    Featured Post

    IT, Stop Being Called Into Every Meeting

    Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

    Join & Write a Comment

    Cisco Pix/ASA hairpinning The term, hairpinning, comes from the fact that the traffic comes from one source into a router or similar device, makes a U-turn, and goes back the same way it came. Visualize this and you will see something that looks …
    Have you experienced traffic destined through a Cisco ASA firewall disappears and you do not know if the traffic stops in the firewall or somewhere else? The solution is the capture feature. This feature was released in 6.2(1) and works in all firew…
    Internet Business Fax to Email Made Easy - With eFax Corporate (, you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, fr…
    Illustrator's Shape Builder tool will let you combine shapes visually and interactively. This video shows the Mac version, but the tool works the same way in Windows. To follow along with this video, you can draw your own shapes or download the file…

    730 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    16 Experts available now in Live!

    Get 1:1 Help Now