How to Publish Different Services Behind NAT by FQDN?

Question

Hi, 
 Im having a NATed network. SPHIS XG is handling all incoming traffic. My question is: 
 How can I publish different services based on FQDN and not port number? 
 I do not want to enter xyz.com:9965 for accounting, xyz.com:80 for web server and xyz.com:21 for FTP. Instead, I want to use: accounting.xyz.com, web.xyz.com and ftp.xyz.com. 
 Thanks in advance!

Emile Belcourt · Accepted Answer

Hi Marwan, 
 You will need to set those domains up as FloSupport have said to point at your IP. Then on the XG you will want to use the Web Application template from Business Application Policies. 
 Basically you'll be using Webserver protection and setting up a listener that examines the host request and redirects to the appropriate server you have set. 
 Unfortunately, default natting cannot do this on any appliance i have heard of. 
 Below is a short guide and to add to it, always enable "pass host header" so if you have a server that has multiple bindinga your webaerver will respond with the correct one. 
 
 Emile

FloSupport · Answer

Hi Marwan Kandeel 
 For the HTTP/HTTPS based services, you could configure a WAF rule to proxy and forward over incoming sub-domain traffic to your specified internal server IP/port. 
 However for FTP - WAF will not work, you would need to configure a regular DNAT rule for this. FTP will work the same way for every hostname (ftp://accounting.xyz.com , ftp://web.xyz.com , ftp://ftp.xyz.com ) 
 Regards,