Basic WAF setup

Hi lara20 

Thank you for reaching out to the Community! 

Are you able to connect to your web server on port 80 from the internal network? 

Please enable logging on rule 3 and provide reverse proxy logs from the firewall.

Check out the following KBA for more info: Sophos XG Firewall: WAF troubleshooting.

Thanks,

Hi Patel, thanks for the response. 

Found out Hostname in the HTTP request (my WAN ip) does the match the server name (webserver.domain.com)

If i had the public dns records match to the server name ( A record -my public ip pointing to webserver.domain.com) should that be ok. 

Also wondering if the WAF requests from the WAN can be protected with an external(another) domain name instead of providing real domain name in the public url

Eg user on wan types www.server1.domain1.com and when the request reaches XG, it translates/redirects  it to www.server1.realdomain.com. Is that possible. 

Hi lara20 

Thanks for sharing the snapshot. 

I can see you have tried to access or browse the website on IP address and not with domain name. 

In the WAF rule domain settings you have only added : domain and not the IP.

Please add IP address 92.41.X.X in the WAF rule domain settings and confirm the status by accessing over IP.

Thank you i am now able to access the webserver from the WAN. 

Is it possible to reroute domain names in the WAF. 

Hi lara20 

Unfortunately with XG WAF URL redirection is kind of feature request.

You may post fresh detail request on Ideas Portal or you may add vote on existing thread.

https://ideas.sophos.com/forums/330219-xg-firewall/suggestions/18529873-url-redirection