Hi I'm a newby @ Sophos.
I'm using a Sophos UTM9 for 3 webservers (IIS) behind my firewall.
For 2 servers (ie web001 and web002) I need to block all HTTP traffic except from an exception list i've made in groups under network definition.
SO Web001 and Web002 only may receive http(s) requests, when the IPaddres exists in the list i've created (Exception).
So far so good.
For 1 other (ie Web003) server behind my Firewall I must receive all http(s) requests from any external (All IP).
I've created a HTTP DNAT rule and a HTTP(S) DNAT rule, since you can't group services to an destination address. (error message)
So for the other two servers i did the same. So I have now 6 DNAT rules.
When i test this.. The only first 2 DNAT rules (for 1 server) will work. The other rules which are on place 3-6 won't work.
If I change the order of the rules it remains the same. Rules on position 1 and 2 still works...The rest won't work...
Is there any restriction which says that the least rights or membership of a group blocks rules?
This thread was automatically locked due to age.
