From the ScreenOS options menu, click Network, and then click Interfaces.
From the ethernet3 interface, click Edit
.
From the Edit screen, click to select VIP.
From Virtual IP Address, enter the IP address of the web server.
For this example, we have entered 210.1.1.10
.
Click Add.
Click New VIP Service.
From the Virtual IP drop-down menu, select the Virtual IP address. In the Virtual Port text box, enter a port number. From the Map to Service drop-down menu, select a service. In the Map to IP text box, enter the internal IP address of the web server.
For this example, we used a Virtual IP of 210.1.1.10, a Virtual Port of 80, a Map to Service of HTTP (80), and a Map to IP of 192.168.1.10
.
Click OK.
The Virtual IP will listen to the Virtual Port. If you have a Virtual Port of 80, and a policy with the ANY service, all traffic going through port 80 will be passed.
From the ScreenOS options menu, click Policies.
From the From drop-down menu, click to select Untrust. From the To drop-down menu, click to select Trust
.
Click New.
Under Source Address, click to select Address Book. From the Address Book drop-down menu, click to select Any.
Under Destination Address, click to select Address Book. From the Address Book drop-down menu, click to select VIP (210.1.1.10).
From the Service drop-down menu, click to select HTTP. From the Action drop-down menu, click to select Permit