(Cisco_ASA firewall graphic configuration example After some enterprise intranet servers are mapped out, the external network can be accessed normally, but the intranet users want to use the external network server IP to convert the internal network server IP. This is not allowed by Cisco firewalls. If you want to change the firewall by such a method, it is not safe to do so, because the firewall thinks that there is a machine in the intranet attacking the firewall, so the data that runs over will be lost behind the firewall. But if the customer's intranet has such a need, it can also be realized.
Intranet access to external network server dns-doctoring-2zones.pdf)