Welcome to ISAserver.org

Site to Site DMZ Failure

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> DMZ >> Site to Site DMZ Failure

Page: [1]

Message

<< Older Topic Newer Topic >>

Site to Site DMZ Failure - 14.Oct.2006 12:26:22 AM

Linnie94

Posts: 3
Joined: 13.Oct.2006
Status: offline

I’m having problems access my DMZ across the wire from one of my branch office locations. I have two sites, work and Colo. Work is where all of the employee’s are stationed and the Colo is where we have all of our servers.

WORK: ISA 2004 Network Engines Box. Using the internal interface only. No DMZ.
           Internal 192.168.1.0 – 192.168.1.255

COLO: ISA 2004 Network Engines Box. There I have an internal network and a DMZ.
           Internal 192.168.2.0 – 192.168.2.255
           DMZ 10.10.20.0 – 10.10.20.255

I have a site to site VPN setup between the two locations where I can access any of the resources on each of the internal networks from the other. From the Colo site, I can go from the Internal network to the DMZ no problem.

Here’s my problem. From the Internal Network at work, I’m trying to ping the servers in the DMZ at the COLO, and I can’t seem to. I’m on a machine at Work 192.168.1.100 and I’m trying to ping 10.10.20.1 and I get nothing.

Any idea’s where I can check? Thanks everyone!

Post #: 1

Featured Links*

RE: Site to Site DMZ Failure - 14.Oct.2006 6:29:44 AM

spouseele

Posts: 12782
Joined: 1.Jun.2001
From: Belgium
Status: offline

Hi Linnie94,

what network definitions and relationships do you have in place to support that scenario? What access rules have you defined?

HTH,
Stefaan

(in reply to Linnie94)

Post #: 2