Flex 200 and web server problems

CRP0499
CRP0499 Posts: 12
First Comment Third Anniversary
in Security

I have a new Flex 200 and one web server behind it. I built my NAT (virtual server) and my security policy and it's still getting dropped when the traffic comes in.

At first, I thought it was because the device was on 443 for management so I reconfigured the device to use 8443 and that's working fine, but still, I can't get my web server (or my RRA) accessible from the outside.

Here's what I did:

I created an object for my external IP as a host.

I created an object for my internal IP as a host.

I created the NAT policies and the sec policy and applied them.

In the log, I'm seeing the traffic dropped with the message below:

Match default rule, DNAT Packet, DROP

i'm struggling on this one. Thanks

Accepted Solution

  • Zyxel_Kevin
    Zyxel_Kevin Posts: 558
    Zyxel Certified Network Administrator - Security Zyxel Certified Sales Associate 50 Answers 500 Comments
     Zyxel Employee
    Answer ✓

    Hi @CRP0499 ,

    Greeting Form, From your statements it sould like you are missing a security policy.

    Please kindly check if you have the rule like this and the higher priority:

    (Please check the address is the real web IP, it may private IP)

    Image 132.png

    If the issue still persist, please provide the config file by private message.

    Thank you

All Replies

  • CRP0499
    CRP0499 Posts: 12
    First Comment Third Anniversary

    That was it! Missing a WAN to LAN policy.

Categories

Security Highlight


Read more

Security Help Center

  • FAQ
  • New & Release
  • Monthly Express
  • Threat Intelligence
  • Video Tutorials
    • EnglishTiếng ViệtРусскийไทย中文（台灣）