Thread Info
  • State Verified Answer
  • +1 person also asked this people also asked this
  • Locked Locked
  • Replies 5 replies
  • Answers 1 answer
  • Subscribers 27 subscribers
  • Views 3780 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

How to Publish Different Services Behind NAT by FQDN?

Marwan Kandeel

Hi,

Im having a NATed network. SPHIS XG is handling all incoming traffic. My question is:

How can I publish different services based on FQDN and not port number?

I do not want to enter xyz.com:9965 for accounting, xyz.com:80 for web server and xyz.com:21 for FTP. Instead, I want to use: accounting.xyz.com, web.xyz.com and ftp.xyz.com.

Thanks in advance!



This thread was automatically locked due to age.
Parents Reply Children
  • 0 in reply to FloSupport

    Thanks for the response. So you mean I should configure it with my DNS host? I’m hosting with GoDaddy. Any idea what needs to be performed or how to be done?

  • +2 in reply to Marwan Kandeel

    Hi Marwan,

    You will need to set those domains up as FloSupport have said to point at your IP. Then on the XG you will want to use the Web Application template from Business Application Policies.

    Basically you'll be using Webserver protection and setting up a listener that examines the host request and redirects to the appropriate server you have set.

    Unfortunately, default natting cannot do this on any appliance i have heard of.

    Below is a short guide and to add to it, always enable "pass host header" so if you have a server that has multiple bindinga your webaerver will respond with the correct one.

    Emile

  • 0 in reply to Emile Belcourt

    Thanks! It worked for me!

    One last question:

    I was successful doing it for traffic on port 80 for now. But, if the local server is listening on a specifc port, let’s say I access it like this: 192.168.1.20:9965. How would I publish it based on fqdn through the WAF?

  • 0 in reply to FloSupport

    Just to clarify:

    My accounting system uses port 9965. It is now published on SOPHOS.

    My FTP server uses default port. It is not published yet.

    So I don’t want to use accounting.xyz and ftp.xyz:21. I want SOPHOS to identify the internal server (IP) AND its own port.

    So,

    I want to use accounting.xyz and .

    Does your posted solution serve my plan?