WAF

Hi Lev Anni : Thank you for connecting with the Sophos community team. No NAT rule is not required, only in the Firewall rule, the WAF rule is fine to submit the request to the WAF module (reverseporxy). If any matching rule in the NAT rule section is found for the same traffic then it will act as in DNAT in place of WAF.

thanks a lot!!!

Seems like my previous post did't go through :/

What is very interesting to me, we are going to protect at least 1000 web sites hosted under one up address. Is it possible to create one single WAF rule for them or it is required to create separate rules one by one, and upload their certificates? Is creating a web server enough and by itself means it is generally protected?