Sophos Wan -> DMZ Passthrough

Nicholas,

you should create a Business Application Rule (DNAT template) and allow access from WAN to DMZ where the destination host is the WAN public IP and the protected server is the DMZ IP and Protected zone is DMZ.

Nicholas,

you should create a Business Application Rule (DNAT template) and allow access from WAN to DMZ where the destination host is the WAN public IP and the protected server is the DMZ IP and Protected zone is DMZ.

Thank you for your help. I will try that. My only concern and maybe I should have explained this in the post. This customer is coming from a sonicwall and it was set up as Transparent DMZ on port 5. So the cisco does not have a local it has the public IP on it. So what I did on the DMZ IP is put the same public IP that I also have on the WAN public IP.

Should that still work?

With it set that way we do see a IP conflict on our testing bench. The way we are testing is we have a computer plugged into the WAN port and a PC plugged into the DMZ port. The PC on the DMZ port is getting an IP conflict so definitely no traffic crossing it. This is also how we tested the port forwarding for the FTP server. 

Nicholas,

if you want transparent traffic from WAN to DMZ (sharing the same IP address network), you can bridge the 2 interfaces and then create network policy to allow traffic coming/going to WAN or DMZ.

Thanks

Thank you so much. That worked perfect.