Publishing internal server(web,SSH) internet behind RED50 Standar/Split

¡Hola! Ruben and welcome to the UTM Community!

Yes, but will the remote site be secure enough without the protection of the UTM in Standard/Unified?

You could just use a Full NAT or Webserver Protection in Standard/Unified.

Cheers - Bob

Hello

I suppose that in standar/unified mode the remote site is more secure.
Currently it is configured in Full NAT standar/unified, but in case I may need Full NAT in standar/split mode how could it be done?

Please insert a picture of the Edit of your current Full NAT, Ruben.

Cheers - Bob

Hello

this is the DNAT Rule:

That is a DNAT and it's what is used when the server is behind the UTM and traffic arrives at the UTM on it's external address.

If the topology is 'Internet <--> UTM <--> RED <--> Server', you must use a Full NAT like:

     Full NAT : Internet IPv4 -> Services Geopalma -> Movistar (Address) : From Internal (Address) to Servidor Geopalma

Cheers - Bob

That is a DNAT and it's what is used when the server is behind the UTM and traffic arrives at the UTM on it's external address.

If the topology is 'Internet <--> UTM <--> RED <--> Server', you must use a Full NAT like:

     Full NAT : Internet IPv4 -> Services Geopalma -> Movistar (Address) : From Internal (Address) to Servidor Geopalma

Cheers - Bob

hello

is this the configuration you suggest for the full NAT?

Hello

Thank you very much for your help, that's correct, I just needed this Full NAT rule to make it work.