1

My requirements is users wants to access public hosted web -sites of same organization from intranet we are having palo alto firewall deployed as perimeter firewalls

Improve this question
2
  • 3
    You're better off using a split-brain name server that resolves names to internal addresses for internal users.
    – Ron Trunk
    Commented Jul 15, 2020 at 16:26
  • 2
    Fix your DNS to return internal addresses for internal users. Do not waste your firewall and router resources and bandwidth for internal network traffic.
    – Ron Maupin ♦
    Commented Jul 15, 2020 at 16:49

1 Answer 1

Reset to default
2

Essentially all you need to do is set the source zone to your internal zone, the destination zone to your external facing zone, the destination interface to be "any", the source address to be your inside subnet/host, the destination address to be your webserver's PUBLIC IP address, the translated source to be your firewalls INSIDE interface address, and the translated destination to be your webserver's PRIVATE IP address.

You can see a better explanation of what's needed here

Improve this answer

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.