If you're experiencing a situation where the Sangfor NSF 11000I-A firewall can successfully ping a DMZ server, but local PCs cannot, there may be a configuration issue in the firewall settings. Ensure that the firewall rules governing traffic between the local network and the DMZ zone are correctly configured. Check for any restrictions or misconfigurations that might be preventing communication from the local PCs to the DMZ server. Verify that the necessary ports are open, and there are no conflicting rules impacting outbound traffic from the local network. Also review network topology, routing, and subnet configurations to guarantee proper connectivity. If the issue persists, thorough troubleshooting and examination of logs may be necessary to pinpoint and address the root cause of the problem.

While the firewall is able to ping the DMZ server successfully, local PCs are unable to establish a connection. To address this, first, verify the firewall rules in place for communication between the DMZ and local networks. Ensure that appropriate access rules are configured to allow traffic between the DMZ and local zones. Check for any potential network misconfigurations, such as incorrect IP settings or subnet mismatches. Review the logs on the firewall for any denied traffic or error messages that may provide insights into the issue. If necessary, adjust the firewall settings accordingly, considering security policies while enabling the required communication channels between the DMZ and local networks.