Netscreen 5GT Extended - DMZ issues

Sep 05, 2005 2 Replies
T
Netscreen 5GT Extended - DMZ issues open original image

Hi,



Was wondering if anyone might be able to help me out with a problem I'm having with my Netscreen 5GT Extended.



I've got everything working coreectly in terms of trust and untrust so decided to get the DMZ set up. I've adready switch to the correct port mode, so I've simply set up a personal web server in the dmz ethernet.



I've set up a policy which allows me to gain access to the pc in the DMZ, this works fine. I've then set up a policy which goes from untrust to dmz for services http, ping and traceroute (the second two are for testing only). I've enabled logging on this policy but I get nothing.....



Any help would really be appreciated.



Many thanks,



Rick


Vote
Twitter Facebook LinkedIn
V

Hm... this is difficult, because I cannot see what your network equipment is doing from here.

Could you try to provide more information, please?

Yours, VB.

Vote
Twitter Facebook LinkedIn
S

Did you setup a MIP or VIP from untrust to dmz

perform a get mip or get vip cli command and check the public and private addresses are correct; Then turn loggin on the policies, if all fails perform a debug flow basic.

regards

Dave Sinclair NetScreen Authorised Security Instructor

formatting link

Vote
Twitter Facebook LinkedIn

Join the Discussion

Have something to add? Share your thoughts — no account required.

Didn't find your answer?

Ask the community — no account required