Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 3 replies
  • Subscribers 27 subscribers
  • Views 747 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

DMZ web traffic - allow specific IP to specific website URL.

David Harrison1

Hi all, 

 

I have a DMZ server sat behind an XG fw hosting IIS and a number of websites. all working fine.

 

i also want to host some API's externally, but only allow 1 IP address to access them.

 

e.g. 

https://www.domainname.com (everyone can access it)

https://apiname.domainname.com (only one ip address can access it)

 

both sites will exist on the same DMZ server.

 

i've seen a few articles about locking down external IPs to one DMZ IP, but i cant find anything on locking down specific web addresses on the same DMZ servers?

 

Thanks

Dave

 



This thread was automatically locked due to age.
Parents
  • 0

    Hi  

    You may try with WAF rule where you may specify the "Domain" inside WAF rule and set the "Allowed client networks" to specific host which you want to allow and you may create another WAF rule for another domain where "Allowed client networks" you may set Any to allow it for everyone from outside.


Reply
  • 0

    Hi  

    You may try with WAF rule where you may specify the "Domain" inside WAF rule and set the "Allowed client networks" to specific host which you want to allow and you may create another WAF rule for another domain where "Allowed client networks" you may set Any to allow it for everyone from outside.


Children