0

My requirements is users wants to access public hosted web -sites of same organization from intranet we are having palo alto firewall deployed as perimeter firewalls

  • 3
    You're better off using a split-brain name server that resolves names to internal addresses for internal users. – Ron Trunk Jul 15 '20 at 16:26
  • 2
    Fix your DNS to return internal addresses for internal users. Do not waste your firewall and router resources and bandwidth for internal network traffic. – Ron Maupin Jul 15 '20 at 16:49
  • Did any answer help you? If so, you should accept the answer so that the question doesn't keep popping up forever, looking for an answer. Alternatively, you can post and accept your own answer. – Ron Maupin Dec 17 '20 at 18:59
1

Essentially all you need to do is set the source zone to your internal zone, the destination zone to your external facing zone, the destination interface to be "any", the source address to be your inside subnet/host, the destination address to be your webserver's PUBLIC IP address, the translated source to be your firewalls INSIDE interface address, and the translated destination to be your webserver's PRIVATE IP address.

You can see a better explanation of what's needed here

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.