Publishing internal server(web,SSH) internet behind RED50 Standar/Split

¡Hola! Ruben and welcome to the UTM Community!

Yes, but will the remote site be secure enough without the protection of the UTM in Standard/Unified?

You could just use a Full NAT or Webserver Protection in Standard/Unified.

Cheers - Bob

Hello

I suppose that in standar/unified mode the remote site is more secure.
Currently it is configured in Full NAT standar/unified, but in case I may need Full NAT in standar/split mode how could it be done?

Please insert a picture of the Edit of your current Full NAT, Ruben.

Cheers - Bob

Hello

this is the DNAT Rule:

That is a DNAT and it's what is used when the server is behind the UTM and traffic arrives at the UTM on it's external address.

If the topology is 'Internet <--> UTM <--> RED <--> Server', you must use a Full NAT like:

     Full NAT : Internet IPv4 -> Services Geopalma -> Movistar (Address) : From Internal (Address) to Servidor Geopalma

Cheers - Bob

hello

is this the configuration you suggest for the full NAT?

hello

is this the configuration you suggest for the full NAT?

Hello

Thank you very much for your help, that's correct, I just needed this Full NAT rule to make it work.