asked on

Firewall, allow inside to access outside interface

Dear all,

I have a firewall with several public IP's for different services. One service should be accessible from the inside but I haven't found any way to solve this on my inside network so I must route my inside hosts to the specific public IP address.

I'm pretty sure it's just a security policy, and maybe I must edit the NAT list but I'm not exactly sure.

I have a Palo Alto firewall, but I guess any suggestions will work since this is a more "generic" question...

Andrew Davis

Need a bit more information as i am a little confused as to what you are trying to do.

Are you talking about something like you host your own web (or whatever) service internally so the public facing DNS points to your exteernal interface so users external to your netowrk can access the service, and you want internal users to also see the website? if this is the case it is a DNS issue and not a firewall issue.

Can you explain what it is you are trying to acheive.

Cheers
Andrew

ASKER CERTIFIED SOLUTION

arober11

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

kaare_t

ASKER

Thanks guys! I will do a little research on both and come back with my solution. I think both suggestions (DNS & Hairpinning) will work fine.

kaare_t

ASKER

Hairpin was what I was looking for!

cant-col

How did you set this up? We are looking for the same thing and are having a few problems.