DMZ web traffic - allow specific IP to specific website URL.

Question

Hi all, 
 
 I have a DMZ server sat behind an XG fw hosting IIS and a number of websites. all working fine. 
 
 i also want to host some API's externally, but only allow 1 IP address to access them. 
 
 e.g. 
 https://www.domainname.com (everyone can access it) 
 https://apiname.domainname.com (only one ip address can access it) 
 
 both sites will exist on the same DMZ server. 
 
 i've seen a few articles about locking down external IPs to one DMZ IP, but i cant find anything on locking down specific web addresses on the same DMZ servers? 
 
 Thanks 
 Dave

Vishal_R · Accepted Answer

Hi David Harrison1

Yes you may use that same cert applied to IIS -But you need to import the same on XG with private key ( of cert or CSR - anyone which is available with you) and then you may able to choose that cert on WAF rule.