I need help on implementing Network Secure Gateway on a Subnet where that subnet will be the Internet Facing let say a DMZ.
My Setup:
- Delete the Endpoint-ACl through portal
- Create the Virtual Network With two subnet-1 and DMZ-NSG
- Create the NSG group
- Rules Applied to the NSG Group
- Associate the NSG Group to the Subnet DMZ-NSG
My problem is I can get access to my VM from Subnet-1 so local network with no problem.
I just cannot make it work from Internet the port 443 and 8443 doesn’t show up as it is suppose like the Builtin way with the Endpoint and ACL. If I remove the NSG group from the DMZ-NSG subnet and I use the Endpoint – ACL configuration it is working.
Type: Inbound
Name Priority Action Source Address Source Port Destination Destination Protocol
Prefix Range Address Prefix Port Range
---- -------- ------ --------------- ------------- ---------------- -------------- --------
SSLInternet-DMZ 330 Allow * 443 10.15.25.0/24 443 TCP
SSLInternet-DMZma 331 Allow * 8443 10.15.25.0/24 8443 TCP
What is missing on my configuration?
Yanick |MCSE|MCP+I|MCTS Exchange 2007|MCITP Exchange 2010