DMZ Configuration

[rajeev1963]

I am using Fortigate 100 A Wan1 : 110.234.200.XXX Internal : 192.168.1.0/24 ip: 192.168.0.1 DMZ: 10.10.10.0/24 ip: 10.10.10.1 and my Web Server ip: 10.10.10.2 I am not able to access http/https/ftp on webserver with wan1 ip. Please help me Rajeev Srivastava

[claumakurumure]

Hi there, Sorry to bother you with silly questions Can you ping WAN1 from the internet? Do you have default route to the internet through Wan1? Is the route through wan1 appearing under Router =>Monitor? Do you have policy based routes for incoming traffic? I have noticed if the default gateway is wrong users can go out to the internet but you will not be able to get to the external interface from outside. If you cant ping Wan1 from outside clear that first. If you can ping then there could be firewal policy issues. Lastly you did not specify whether NAT is enabled or not for Wan1 => DMZ