Hello, The nat (inside) 0 do not translate traffic from the dmz to inside. You must create a static no nat entry between the host in the dmz and the inside. Like: static (inside,dmz) 10.1.1.1 10.1.1.1 netmask 255.255.255.0 BR, - Jonathan -