I am trying to bring a new SonicWall NSA 3500 (latest OS v5.8) online in stages and in PARALLEL with our existing firewall BEFORE cutting-off the old one, and I cannot seem to reach our Exchange (OWA) server.
Network Diagram: http://i.imgur.com/49Vk62s.jpg
As shown in the diagram, I've given the SW a unique public IP on X1, but any attempt to get to the public address of our OWA server from either of the two SW LANs fails.
I know firewall ports are open and working as I can use other OWA servers outside of ours.
I have tried adding the following NAT Policy without success:
- Original Source: Any
- Translated Source: Original
- Original Destination: Exchange_Public_IP_Object (188.8.131.52)
- Translated Destination: Original
- Original Service: Any
- Translated Service: Any
- Inbound Interface: Any
- Outbound Interface: Any
Current static routes, which appear to funcion as intended by keeping traffic from each LAN going to their respective WAN interface include: (source, dest, service, GW, Interface, Metric, Priority)
X0 Subnets, Any, Any, X1 Default Gateway, X1, 1, 12
X4 Subnets, Any, Any, X5 Default Gateway, X5, 1, 12
If I had to guess, the SW is trying to do some sort of internal loopback when it sees the public IP for our server matches the subnet on X1. But, as said, there is no physicall connection (yet) between the SW and the existing FW and OWA server.
I am not sure if my NAT Policy or the routing is invalid, or, this cannot be accomplished until I physically move the server over to the new SW.