redirect url

Zane,

you should use WAF and site path routing.

community.sophos.com/.../126470

https://community.sophos.com/kb/en-us/122829

Also WAF will provide additional reverse proxy security countermeasuress compared to simple DNAT.

Regards

this looks close, but not quite unless I am not understanding it correctly.

so if I use WAF, I would point my users to the external IP address of my firewall.  example: 20.20.20.1

It looks like the site path routing will allow for adding a path on the client side which will direct the request to the correct web server.  example: httsps://20.20.20.1/path can be configured to direct that traffic to a specific web server called path.  Internally, that server would be accessed using: https://path

But I not only want it to hit the correct web server but to also go to the correct directory on that server.  Example, internally, I want to access https://path/A

how do I use WAF and/or site path routing to only allow access to https://path/A externally but block access to https://path

does that make sense?