Re: 'Reliable' NAT failing mate since u have statically translated the internal dmz server to the routable ip address. try in ur policy to permit traffic to the routable address of the servers than the internal server address. let me know if that works. regards sebastan |