This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Allowing/Denying specific URL's

Hi,

Running an XG310. I have a web server running behind this device and also have a WAF rule for protection. I want to specify which URL's are accessable to the outside world. For example, if I was running www..123.com behind WAF.

www.123.com/everyone should be available

www.123.com/nobody should NOT be available.

Thanks for any help!

Stu

This thread was automatically locked due to age.

0 dirkkotte over 3 years ago

You can define some entry url's within webserver-policies.

Only these and additional linked URL's are reachable. Other URL's or direct connect to deep-linked URL's should not be possible.
Cancel
Vote Up 0 Vote Down

Cancel
0 Stuart Hamilton1 over 3 years ago in reply to dirkkotte

Hi Dirk,

I have the URL i want to give access to listed in the Protection Policy under URL Hardening, but I can still access others URL's that are not listed.

Thanks for the help.
Cancel
Vote Up 0 Vote Down

Cancel
0 dirkkotte over 3 years ago in reply to Stuart Hamilton1

can you post / send me per PM one of the URL's not listed?

... and a screenshot of WAF-Rule?
Cancel
Vote Up 0 Vote Down

Cancel
0 Stuart Hamilton1 over 3 years ago in reply to dirkkotte

PM'd. Thanks
Cancel
Vote Up 0 Vote Down

Cancel
0 Stuart Hamilton1 over 3 years ago

Additional info:

I have a Protection policy set up for

This has been added to a WAF rule for the specified domain

My understanding was that is I add allowed URL's to the hardening area, the no other url's would be allowed. Is this presumption incorrect?

Thanks
Cancel
Vote Up 0 Vote Down

Cancel
0 dirkkotte over 3 years ago in reply to Stuart Hamilton1

Almost right..
Only the listed URLs may be accessed directly (entrance-url)
Url contained within the allowed opened pages, are allowed to open afterwards to.
...so far the theory
Cancel
Vote Up 0 Vote Down

Cancel
0 Stuart Hamilton1 over 3 years ago in reply to dirkkotte

So is there a way to specifically block certain pages then?

Thanks
Cancel
Vote Up 0 Vote Down

Cancel
0 dirkkotte over 3 years ago in reply to Stuart Hamilton1

I don't know anyone
... possible an IPS-Rule ...
Cancel
Vote Up 0 Vote Down

Cancel
0 Stuart Hamilton1 over 3 years ago in reply to Stuart Hamilton1

Wanted to "Bump" this question to see if I can find an answer on this? Appreciate any help.

Thank
Cancel
Vote Up 0 Vote Down

Cancel