SonicWALL: Webserver on DMZ cannot access DB Server on LAN

Posted on 2009-02-18
Last Modified: 2012-05-06
I am configuring a SonicWALL NSA 2400 firewall with SonicOS Enhanced 5.x. Everything works just great except for one problem: the webserver on our DMZ needs to access a db server on the LAN, and simply will not do so.

I've followed all instructions, double-checked all entries, and attempted to work with SonicWALL support (they were completely stumped).

We have a single T1 static IP address, so the DMZ is NATted.

I'm missing something. But what?

P.S. The client wants to replace IPCop, which is working perfectly except for the fact that it won't do T1 failover or load balancing.
Question by:michaelknowles
    LVL 32

    Accepted Solution

    You must have created a rule from DMZ->LAN; what is the priority of the rule; have you tried moving the rule up; may be some other less restrictive up in the order is causing the issue.

    Please check and update.

    Thank you.

    Author Comment

    I will double-check the DMZ->LAN rule priority and report back tomorrow.


    Author Closing Comment

    This is part of the problem. I think there is a bigger issue, having to do with the DMZ server as well. Your suggestion has cleared up part of the problem, but I have more work to do. Thanks for pointing me in the right direction.

    Featured Post

    Live: Real-Time Solutions, Start Here

    Receive instant 1:1 support from technology experts, using our real-time conversation and whiteboard interface. Your first 5 minutes are always free.

    Join & Write a Comment

    Wikipedia defines 'Script Kiddies' in this informal way: "In hacker culture, a script kiddie, occasionally script bunny, skiddie, script kitty, script-running juvenile (SRJ), or similar, is a derogatory term used to describe those who use scripts or…
    This article offers some helpful and general tips for safe browsing and online shopping. It offers simple and manageable procedures that help to ensure the safety of one's personal information and the security of any devices.
    Internet Business Fax to Email Made Easy - With eFax Corporate (, you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, fr…
    This demo shows you how to set up the containerized NetScaler CPX with NetScaler Management and Analytics System in a non-routable Mesos/Marathon environment for use with Micro-Services applications.

    746 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    15 Experts available now in Live!

    Get 1:1 Help Now