NSF 11000I-A

hI sangfor team,

We have encountered an issue in the dmz zone the firewall can ping the dmz server but the local pc cant is there any configuration needed.

or what would be the best solutions for this

HiHi,

Are you attempting to configure the NAT? Please refer to the NAT configuration guide below for your reference:

https://knowledgebase.sangfor.com/detailPage?articleData=%7B%22articleType%22%3A1,%22articleId%22%3A%226de9ccc724194294a5ea5995cc578720%22,%22keyword%22%3A%22%22%7D

not sure if i understand the question correctly but generally there can be two reasons causing this issue. If internet access is working on the DMZ device then check its firewall. it might be blocking outside access

Create a policy for lan Network to access the DMZ servers
also check in System->troubleshooting -> troubleshooting , where your traffic to DMZ zone is blocking
you can also check after put the LAN IP in SOC-> Whitelist (if it start access DMZ zone that means you must create the access policy)

If you're experiencing a situation where the Sangfor NSF 11000I-A firewall can successfully ping a DMZ server, but local PCs cannot, there may be a configuration issue in the firewall settings. Ensure that the firewall rules governing traffic between the local network and the DMZ zone are correctly configured. Check for any restrictions or misconfigurations that might be preventing communication from the local PCs to the DMZ server. Verify that the necessary ports are open, and there are no conflicting rules impacting outbound traffic from the local network. Also review network topology, routing, and subnet configurations to guarantee proper connectivity. If the issue persists, thorough troubleshooting and examination of logs may be necessary to pinpoint and address the root cause of the problem.

check in System->troubleshooting.
and check the DMZ traffic

heck the firewall rules on both the DMZ server and the local PCs. Ensure that the rules allow incoming ICMP (ping) traffic.
Verify that there are no restrictive rules blocking communication between the local network and the DMZ.

Try to turn off the PC firewall locally. Hope this helps

check the route network

Hi,i'm sorry to hear that you’re having trouble accessing the DMZ from your internal network. Here are some possible reasons why this might be happening:

1) Firewall rules: Check if there are any firewall rules that are blocking access to the DMZ from the internal network. You may need to add a rule to allow traffic from the internal network to the DMZ.
2) Routing issues: Ensure that the routing table on your firewall is correctly configured to route traffic between the internal network and the DMZ.
3) Network topology: Verify that the network topology is set up correctly. Ensure that the DMZ is connected to the firewall and that the internal network is connected to the firewall.
4) DNS issues: Check if there are any DNS issues that might be preventing access to the DMZ. Ensure that the DNS server is correctly configured to resolve names in the DMZ.

I hope this helps you resolve the issue. If you need further assistance, please provide more details about your network configuration and the error messages you’re seeing.