NSF 11000I-A

hI sangfor team,

We have encountered an issue in the dmz zone the firewall can ping the dmz server but the local pc cant is there any configuration needed.

or what would be the best solutions for this

Firewall is successfully pinging the DMZ server, however the local PC cannot reach it. This may indicate that there is a firewall rule missing that permits traffic from the local PC's IP address to the port of the DMZ server. Alternately, the firewall's source NAT or state inspection settings may be causing issues. To restore connectivity, look for these problems and make the necessary adjustments to the firewall setup. Remember that identifying the precise reason and applying the appropriate remedy will depend on specific rule specifics and logs.

Check your routes and network setting s

Already solve for dmz to lan to wan and wan to lan can ping to local pc now

While the firewall is able to ping the DMZ server successfully, local PCs are unable to establish a connection. To address this, first, verify the firewall rules in place for communication between the DMZ and local networks. Ensure that appropriate access rules are configured to allow traffic between the DMZ and local zones. Check for any potential network misconfigurations, such as incorrect IP settings or subnet mismatches. Review the logs on the firewall for any denied traffic or error messages that may provide insights into the issue. If necessary, adjust the firewall settings accordingly, considering security policies while enabling the required communication channels between the DMZ and local networks.

you can add new rules to allow traffic lan to dmz dan dmz to lan

Check if the firewall rules specifically permit ICMP traffic (pings) from the internal network to the DMZ zone.
Particular Ports: Verify that the proper ports in the firewall rules are open if you're attempting to access particular services (like HTTP or HTTPS) on the DMZ server.

Think through security implications carefully before activating any services or rules.
Professional Help: Consult a trained network administrator or security specialist for professional help if you're unclear about configuration or troubleshooting.

Security Guidelines:
ICMP Restrictions: Examine any security guidelines that might prevent communication via ICMP, particularly between the internal network and the DMZ.

Make that the firewall provides a path for the DMZ server to return to the internal network.
Front-Server Firewall:
Internal Connections: Verify that the firewall on the DMZ server is set up to accept connections from the internal network if it is present.