Waf config Help

Question

Good morning:

I have a Sophos xg230 with the SFOS version 18.5.2 MR-2-Build380.

I would like to configure the Waf with the following scenario:

1 public ip address
2 different domains
2 different servers

I configure the waf rule with the web1.sophos.com by port 443. If I don't create a dnat rule for traffic to redirect it doesn't work.
If I create it, only one url of one server works for me, but the other one web2.sophos.com not works because the dnat rule only works for the first port in the list.

As I have to configure it, since with the documentation that there is I do not see anything of two servers for an ip.

Thank you

This thread was automatically locked due to age.

Peter-Paul Gras · Answer

Start reading this: https://docs.sophos.com/nsg/sophos-firewall/18.5/Help/en-us/webhelp/onlinehelp/AdministratorHelp/RulesAndPolicies/WebServerProtection/WAF/Rules/index.html 
 It is possible to host several urls and domains through port 443 (make sure to install the correct certificates for your domains). 
 1. create the necessary webservers : Protect > Web Server > Web servers (different webservers can point to more than one physical machine / server) 
 2. create webrules (WAF) for each incoming URL 
 
 (I have for instance two urls (two domains) pointing to one internal webserver. Just to say that is is possible.... 4 webservers, 5 incoming URLs and 5 WAF rules)

Waf config Help

Top Replies