separate services to specific interface

[Askey_oot]

Hi All,

We have an ip public range from our service provider. We want to configure separate connection on port DMZ to our specific service. I have an diagram. It's possible to configure it?

[PhoneBoy · Accepted solution]

On SMB appliances, Port Forwarding is generally handled through Server objects.
It's not clear to me how traffic would be forwarded OUT the WAN interface and come back to the DMZ interface, particularly if the .189 address is on the same subnet as your DMZ interface.

Which means you have a hairpin NAT situation. 
Server objects have a "Force translated traffic to return to the gateway" option to address this specific situation.
This will impact ALL traffic that hits this server object (not just internally sourced).

[the_rock]

Maybe you can verify with TAC to be sure, but what @PhoneBoy said all makes sense.