[how to] create a port forwarding rule for a subdomain

Hi Hyugai,

Thanks for reaching out to the Community! 

Check out the following video for more information, specifically check out the DNAT at 8.58: 

• Sophos (XG) Firewall v18: NAT Enhancements

Is this static IP address configured on the main WAN interface? Or did you configure an Alias IP address on the WAN interface? If it's an alias IP address, ensure that you configure it with /32 netmask. 

Thanks,

Hi Harsh,

So basically i have to create a DNAT rule.

But how does the firewall will know that the incoming source is coming from https://sub1.mydomain.com.au? 

Because we have several url like

https://sub1.mydomain.com.au

https://sub2.mydomain.com.au

https://sub3.mydomain.com.au 

and they all redirected to my office static ip address. 

but how do i set the rule so that if the request is https://sub1.mydomain.com.au redirect it to this server with this port.

and if the request is https://sub2.mydomain.com.au redirect it to another server with another port.

If you've multiple domains pointing to different servers on different ports, then you'll need to create individual DNAT for each server and port.

You may also set up a WAF rule for your webservers.

Refer to the link below to configure the webserver protection (WAF) rule.

docs.sophos.com/.../WebServerProtectionRule.html

docs.sophos.com/.../WAFRuleAdd.html

https://docs.sophos.com/nsg/sophos-firewall/18.0/Help/en-us/webhelp/onlinehelp/nsg/sfos/learningContent/WAFProtectWebServerAgainstAttacks.html