Assuming a private network on the inside needs protecting, rather than using a DMZ I would create first a NAT rule for an outside address to the inside address on the web server, then creatre ACLs defining access rules such as allowing port 80 or 443 as needed
Discuss This Question: 3  Replies