Publishing internal web server app to internet without vpn

Hi,

Have you tried WAF?  https://community.sophos.com/kb/en-us/126470

Regards,

Rap

Hi,

Have you tried WAF?  https://community.sophos.com/kb/en-us/126470

Regards,

Rap

I am struggling with DNAT. I tried setting up Clientless SSL and it worked for accessing web pages of the webserver. My need is for an msi file to be installed remotely on a pc on the internet  and then using the installed application access the webserver without the need for vpn. Is this something than can be done 

Iara20,

try this KB:

https://community.sophos.com/kb/en-us/122976

Regards

i have done the following changes 

1. I have a pool of 10 public static ip addresses. In the dns register portal i have configured a A record to point to the server ( eg, webserver.mydomain.com points to the static public ip). This is not my outgoing wan ip address. Its the one i have in my unused pool. I have used that in my Dnat destination Host network. 

2. Setup Dnat as mentioned in the kb. 

So from the web, when i type in the url  mywebserver.mydomain.com it should take me directly to the web server. My web server application works on a different port. What changes have i got to make it accessible from the internet.

Iara20,

the rule seems ok. Change the port from 443 to whatever your webserver is using by typing the port number inside the source port.

For the website, make sure to write the port at the end of the url:

yourpublicip.test.com:442 for example

Regards

Thank you it worked. Just realised the webserver works over port 80. How secure is dnat over port 80. 

Iara20,

on DNAT, XG will intercept and block traffic using its IPS engine. Using WAF, instead, you another layer of defense (layer 7) which will act as a reverse proxy and protect against common Web Attacks (sql inject, xss, csrf,etc..).

Regards