Quote:
Originally Posted by sebastan_bach  so in this i can the server being accessed on it;s private ip from intranet and at the same time have it access on public ip from internet. |
As mcnallym said, yes. With a single host object using a static auto-NAT, you only need one rule with the single host object to control inbound access.
From the intranet, I would assume that you have your private IP published in DNS and the public IP in the MX record on the outside world. 1 rule fits all in this scenario and is my preferred method of deployment. After all, if you're willing to allow 'Any' as a source, then does it matter if it also covers internal users as well as external? Nope, no additional risk is involved so this is a good method.
Also as mcnallym mentioned, you always have the option to do the NAT manually as well. Be aware that if you do this on a Nokia appliance, you will need proxy ARP entries as well as the manual NAT rules. On rare occasion (with very unusual circumstances) I have had to use this method to make something work properly.