Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 3 replies
  • Subscribers 4 subscribers
  • Views 645 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Forwarder to 3rd Party Firewall behind Sophos UTM

Chregu Held

Hi

I'm using the Sophos UTM as the main firewall for my whole network (productive and lab).

Lately I came across several lab scenarios where I would need to have a separate firewall (because the issues are around firewall configuration). For outgoing connections this is not a problem and works fine having the 3rd party firewall's WAN on the UTMs lab interface.

Now my problem is the incoming stuff: I am having only one external IP address and I am using NAT and Webserver Protection on the UTM. Is it possible to forward everything that is coming to a certain address (e.g. zyxel.mydomain.net) to that 3rd party firewall and all other stuff like IP and other DNS names are handled as usual by the UTM?

 

Thanks

Christian



This thread was automatically locked due to age.
Parents
  • 0

    Hallo Christian and welcome back to the UTM Community!

    The only time an FQDN is visible is when someone sends an HTTP/S query to the external IP.  In that case, you can use Webserver Protection to send inbound traffic to your lab firewall.  Otherwise you can only achieve what you want with an Additional Address on the External interface.

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply
  • 0

    Hallo Christian and welcome back to the UTM Community!

    The only time an FQDN is visible is when someone sends an HTTP/S query to the external IP.  In that case, you can use Webserver Protection to send inbound traffic to your lab firewall.  Otherwise you can only achieve what you want with an Additional Address on the External interface.

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Children
No Data
Unfiltered HTML