Avatar of SJCA
SJCA
 asked on

remote access from SSL VPN to DMZ?

Hi Experts,

I have a cisco ASA firewall which also has DMZ on it. My SSL VPN appliance and web server are in DMZ network. My PC is on 'inside' network. From my local computer at work, I can RDP to my web server in DMZ. I also can remote from home thru SSL VPN to my computer at work but can't RDP to web server in DMZ. I guess it's possible an ACL that I need to add into ASA but can't think of anything at this point.

My PC's IP: 10.10.12.25
My web server: 173.28.25.x (public ip)
My SSL VPN: 173.28.25.y (public ip)

Any susggestions? Thanks a lot.
CiscoVPNRouters

Avatar of undefined
Last Comment
SJCA

8/22/2022 - Mon
ArneLovius

a suitably sanitised copy of the current config would be useful
SJCA

ASKER
Hi There,

Unfortunately, I can't post the config file up here for security purposes. I drew a visio map and hope that would help you and everyone else to understand what I'm trying to do. Please feel free to ask if it isn't clear.

Note: I put myself as a Vendor who needs to go to SSL VPN and RDP to the web server.
ArneLovius

I understand what you are trying to do, but it would be imprudent of me to suggest ACL or NAT/PAT rule changes without knowing what the existing ACL and NAT/PAT rules are.

perhaps this might be of use for sanitising the config

https://www.experts-exchange.com/Hardware/Networking_Hardware/A_10296-How-to-sanitise-a-Cisco-config-for-Experts-Exchange.html
Experts Exchange has (a) saved my job multiple times, (b) saved me hours, days, and even weeks of work, and often (c) makes me look like a superhero! This place is MAGIC!
Walt Forbes
ASKER CERTIFIED SOLUTION
SJCA

Log in or sign up to see answer
Become an EE member today7-DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform
Sign up - Free for 7 days
or
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.
Not exactly the question you had in mind?
Sign up for an EE membership and get your own personalized solution. With an EE membership, you can ask unlimited troubleshooting, research, or opinion questions.
ask a question
SJCA

ASKER
Found the solution myself. Thanks.