Solved

Configure pix 501 to access outside ip from inside

Posted on 2009-07-06
4
307 Views
Last Modified: 2012-05-07
Ok, so we have a pix 501 firewall.  Inside we have 2 different web servers using 2 outside ip addresses.  I haven't been able to connect to either outside IP form any computer inside the network.  I was able to configure NAT to allow access, but it breaks all other internet access.  If anyone has any insight on how to configure this I would greatly appreciate it.
0
Comment
Question by:bhmahler
4 Comments
 
LVL 15

Expert Comment

by:Robert Sutton Jr
ID: 24787018
Could you post a copy of your complete config here please. You can remove/change your Public Ip information for your network before posting it here for your own protection. Thanks in advance.
0
 
LVL 20

Accepted Solution

by:
RPPreacher earned 500 total points
ID: 24787033
This is a pretty common issue

www.example.com is your outside name

When users resolve www.example.com, it resolves to aaa.bbb.ccc.ddd (public address)

The PIX does not allow traffic to hairpin (go out and in on same interface).

Easy solution.  Add DNS zone example.com to your internal DNS server.  Add A record www.example.com to resolve to INTERNAL IP.
0
 
LVL 28

Expert Comment

by:Jan Springer
ID: 24787581
0
 
LVL 8

Author Closing Comment

by:bhmahler
ID: 31600247
I went ahead and configured it this way.  Thanks
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

In this tutorial I will show you with short command examples how to obtain a packet footprint of all traffic flowing thru your Juniper device running ScreenOS. I do not know the exact firmware requirement, but I think the fprofile command is availab…
Network traffic routing plays key role in your network, if you have single site with heavy browsing or multiple sites, replicating important application data from your Primary Default Gateway ,you have to route your other network traffic from your p…
Two types of users will appreciate AOMEI Backupper Pro: 1 - Those with PCIe drives (and haven't found cloning software that works on them). 2 - Those who want a fast clone of their boot drive (no re-boots needed) and it can clone your drive wh…
Finds all prime numbers in a range requested and places them in a public primes() array. I've demostrated a template size of 30 (2 * 3 * 5) but larger templates can be built such 210  (2 * 3 * 5 * 7) or 2310  (2 * 3 * 5 * 7 * 11). The larger templa…

785 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question