Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 4 replies
  • Answers 1 answer
  • Subscribers 28 subscribers
  • Views 1330 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SSL Certificate for XG with Multi Server

Marwan Kandeel

Hi,

I have a NATed network. SOPHOS handles all traffic. I have multiple servers published through SOPHOS: FTP, accounting, VPN and others.

I have configured DNS so each server is accessed via its own FQDN. So, I have: ftp.xyz, accounting.xyz and nas.xyz.

I would like external users to access the services with SSL. So, I want users to do: ftps:// ftp.xyz, https:// accounting.xyz and https:// nas.xyz.

Please tell me how to configure it. Create a wildcard SSL certificate and install it on SOPHOS? I’m a newbie with SSLs.



This thread was automatically locked due to age.
Parents Reply Children
  • 0 in reply to Marwan Kandeel

    I would say, this is not possible in the way, you think it should work.

    Basically you want to have a Reverseproxy for those services (as far as i understand). But XG can only offer a HTTP/s Reverseproxy.

    So you have to fallback to DNAT for FTP etc. And this depends clearly on the FTP server. XG will simply "connect" the Client to the FTP server.

    Plus, nevertheless your Domain record is pointing to the same IP? So this will not do any difference. 

  • 0 in reply to LuCar Toni

    Thanks for your response. I was thinking maybe I install an SSL on each server and issue these SSLs based on the FQDN. So, I would issue and SSL for ftp.xyz.com and install it on the internal FTP server. Same thing goes to internal web and accounting. Would it work?

  • 0 in reply to Marwan Kandeel

    Hi Marwan,

    It is possible if you have configured DNAT rule. Your server will be responsible for their own certificate and your client should have these certificates on their machines.