WAN to LAN Inbound NAT - How To?

Question

I just recently installed the Sophos XG platform, coming from a UTM 9 firewall. Question is, how do I create an inbound NAT to forward HTTPS (tcp 443) to an internal web server? I've played around with the policy settings and cannot seem to figure out the proper way to set this up. Any help?

This thread was automatically locked due to age.

AlanT · Accepted Answer

Hi Enigy, 
 DNAT/Full-Nat/1-1 NAT rules, along with server load balancing, and Webserver Protection, are now unified in the new Business Application rules in the policy table. 
 When you create a new rule, you can choose either 
 
 HTTP Based - which will create a WAF rule 
 Non-HTTP Based - which will create a NAT rule 
 
 Or you can choose from one of the available named templates, which are primarily WAF based, and help accelerate setup of protection for various web applications. You're not the first to notice that the naming makes it a little hard to find, if you're looking explicitly for something called NAT. We'll make this a little clearer in the next version. 
 To create a simple DNAT rule, just create a new Business rule, selecting the Non-HTTP based template.

Joffer · Answer

Seems to have changed again in v16.x. 
 It's an Application Template named "DNAT/Full NAT/Load Balancing" now

Nemo · Answer

Here is an example for DNAT TCP 2222 to 22 from specific sources: