I have a websever set up on a DMZ and a database server that is set up on another subnet. I need to allow access to the database from the webserver but not open the port to the internet. Lets say the webserver is 192.168.222.222 and the database server is 192.168.1.8. I need to open port 3053 from the webserver to the database sever. Im using an NSA2600 with updated firmware. Any help would be greatly appreciated. Ive dealt with the NSA series a lot but have never had to open ports to other subnets on it. TIA
Jesse, the task should not be very difficult. Your issue may be the order of operation. Firewall rules are prioritized and the order of statements is significant. Also, statements are applied in one direction so you will need to account for egress as well as ingress packets. Hope that helps.