WEBSITE NOT AVAILABLE FROM LAN

Hi IOFS Technology

Enable NAT on the firewall rule.

Good Luck!!!

 Regards, Ronak.

Hello Ronak,

Thanks for your response.

i created a LAN to LAN rule and the NAT policy is enabled as well

its still not working.

Hi IOFS Technology 

You have configured wrong rule (Network Rule).

You have to configure business rule as following.

Source: LAN-Any

Destination host:184.168.235.94

Service: HTTP/  HTTPS or the port on which your website is working

Protected server: IP of your web server

Protected Zone: LAN

NAT: Enable

Good Luck!!!

Regards, Ronak.

Hello Ronak,

sorry for my late response.

I have configured the business rule as shared by you but the WEBSITE is still not opening.

i also did a policy test as captured below:

Please assist....

Thank you.

Hi ayodeji Oke,

Can you share the Policy test result for Test method as Test Firewall Policy and result Diagnostic > Packet Capture.

Refer How to monitor traffic using packet capture utility in the GUI and in Enter BPF String use host 184.168.235.94 and port 443 

Also share the screen shoot of your host Website and website-IN

Regards, Ronak.

Hello Ronak,

The policy test output is as below:

the below is the packet capture:

HOST WEBSITE

WEBSITE-IN

I await your response.

Thank you.

Hi Ayodeji ,

Could you check if you have created a Reflexive and applied NAT MASQ as per the  configuration shown on the snapshot.

Hello Aditya,

sorry, i need to clarify that we dont host the website in-house. its hosted by a third party. i dont think creating a business rule is necessary.

Hi IOFS Technology

Can you clarify where is your website hosted on your premise? Or on cloud? At which zone your website is located LAN, WAN, DMZ?

Hello Ronak,

Sorry , i was away on leave.

My website is hosted with a third party and its been accessed from the LAN.

The website is located in the WAN.

Thank you...

Hi ayodeji ,

If the website is hosted in LAN , the server should a Private address instead of Public address.  The public address is pointed to XG WAN interface ? The traffic must be going through the LAN to WAN and Back to LAN.

Hi IOFS Technology

First sorry for the misleading solutions. Looking at your initial post and firewall rule I assumed your webserver is behind XG.

Base on your policy test result you should be able to access your website from Rule ID  8. Can you resend me the Policy Test- Test method firewall rule, packet capture result and the rule no 8? Source IP should be same during policy test and packet capture.

You can also try to create a new firewall rule on top of all rule as following.

Src Zone: LAN

Src Net: Any

Dst Zone: WAN

Dst Net: WebServer IP (preferred FQDN host)

Service: HTTP & HTTPS

Rewrite Source Address: Enable

Regards, Ronak.

Hi IOFS Technology

First sorry for the misleading solutions. Looking at your initial post and firewall rule I assumed your webserver is behind XG.

Base on your policy test result you should be able to access your website from Rule ID  8. Can you resend me the Policy Test- Test method firewall rule, packet capture result and the rule no 8? Source IP should be same during policy test and packet capture.

You can also try to create a new firewall rule on top of all rule as following.

Src Zone: LAN

Src Net: Any

Dst Zone: WAN

Dst Net: WebServer IP (preferred FQDN host)

Service: HTTP & HTTPS

Rewrite Source Address: Enable

Regards, Ronak.

Hello Ronak,

Please find below the packet capture:

The policy test result :

Rule NO 8

Hope the screenshot captures your request.

Kindly assist on this please..

Hi IOFS Technology

I am not sure why but there is a descripancy

In policy test and packet capture. Packet capture shows rule id 20 and packet capture shows rule id 21.

Have you tried creating LAN-WAN firewall rule on top of all rule.

You should contact sophos support to look into it.

Regards, Ronak.