Problem with Cisco Static nat rules

pts.
Tags:
Cabling
Cisco
Hardware
Hubs
Routers
Switches
Hi you guys, We are currently in the process to replace our firewall with a Cisco pix 515. I?ve set it up in a testing environment in order to make a replica of the network so I can test everything. The way the network is setup right now we use NAT to translate the internet ip?s to the internal ones (i.e. ip 65.6.12.8 gets translated to 172.25.0.12) for the websites hosted on the network. On the pix firewall I?ve tried to recreate the same situation. It all works like a charm except for one thing. We are using a logfile analyzer which uses the logfiles to create reports and it also checks the corresponding page titles by http to make the reports prettier and easier to understand. Thus far I?ve been unable to get this working with the pix firewall. I think it is related to the fact that it queries the nameserver to get the ip of the website (which will return the internet ip of the site) and then tries to connect to it through the gateway (which is the Pix firewall) since the ip isn?t in the local network. I guess the Pix does not know what to with this or can?t `redirect? the request to the appropriate internal ip. The Pix setup is very basic. I?m using static ip mappings and created filters to allow http traffic to the webservers. All traffic is allowed from the internal interface to external (for now ;-) Is there anyway to make this work like the way it is in the old environment? Or is there something I overlooked that needs to be configured? Thanks in advance, Vincent

Answer Wiki

Thanks. We'll let you know when a new response is added.

Is your analyzer on the same interface as the web server or is it on the inside interface? If you’re concerned that it’s getting the Internet IP, you can test by putting the internal IP Address of the web server into the hosts file of the machine. As long as you allow the analyzers IP to get to the web servers “internal” ip on the Pix, you should be able to query it via this address.

That should get you one step further in the direction you are going.

SF

Discuss This Question:  

 
There was an error processing your information. Please try again later.
Thanks. We'll let you know when a new response is added.
Send me notifications when members answer or reply to this question.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Forgot Password

No problem! Submit your e-mail address below. We'll send you an e-mail containing your password.

Your password has been sent to:

To follow this tag...

There was an error processing your information. Please try again later.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Thanks! We'll email you when relevant content is added and updated.

Following