Direct Access

[kevlav]

Hi,

 

I have been looking into setting up a DA server using the configuration shown below. I am currently stuck configuring external access to and from the server. From what I understand I need to add an A record into our external DNS pointing the DA servers FQDN to a free IP address in our public range. Next I need to have a DMZ created on our Sophos UTM with the DA servers external NIC connected on a private range. Finally I will need traffic directed on our UTM from the public address configured for DA to the IP of the NIC connected to the DMZ.

 

I would appreciated If anyone could advise if this sounds correct or if I have missed anything in regards to making the internal DA server externally resolvable. Also how would I go about finding what public addresses are currently free in our public ranges.

 

(Please forgive me if I cause any confusion as this is my first time looking at DA)

 

NAT Configuration

 

2 NICs (External & Internal)

External NIC is in a DMZ

Internal NIC is on the corporate network