External Clients cannot connect to web server located on DMZ

[mgallagher]

We have setup a web server within our DMZ Network.
An External IP Address has been setup and assigned with a NAT Rule on the Checkpoint firewall to the DMZ Network ip range.

Problem is, there is no connection from the internet to the web server.

We can connect from internal network to the dmz network but external customers can not connect.

Is there some configuration thats needs to be setup on the windows 2000 advanced server to allow the external customer access the server.

What type of security authentication or additional options should be setup.

Thanks

 

[Piloria]

i presume you have a rule in the rulebase allowing connection to your web server
any-webserver-http-allow
i also presume that the NAT rule is for static NAT and not hide.

rather than setup the nat using the DMZ network use a static nat on the webserver object itself.

on the webserver itself security would depend on who you want to have access.

 

[aspeed]

Do you have the the arp entry in the local.arp file?