Server load balancing

Is there a reason that you're not using Webserver Protection for this?

What information do you get from doing #1 in Rulz?  How are you trying to access the Webserver?

Cheers - Bob

Hi guys,

Im on 9.4x firmware. WAF support only port 80/443. The server runs on multiple ports. I will access the server via external ip.

no, the waf supports all ports, not only 80/443

Manuel of virtual webservers:
Port: Enter a port number on which the virtual webserver can be reached from external. Default is port 80 with Plaintext (HTTP) and port 443 with Encrypted (HTTPS).

Manuel of real webservers:
Port: Enter a port number for the communication between Sophos UTM and the webserver. Default is port 80 with Plaintext (HTTP) and port 443 with Encrypted (HTTPS).

we're using our sharepoint with the waf on port 443 (+ http redirect) and the sharepoint central administration on port 10000

edit: our utm is on 9.5, but I'm pretty sure this was also working in a previous version like 9.4

no, the waf supports all ports, not only 80/443

Manuel of virtual webservers:
Port: Enter a port number on which the virtual webserver can be reached from external. Default is port 80 with Plaintext (HTTP) and port 443 with Encrypted (HTTPS).

Manuel of real webservers:
Port: Enter a port number for the communication between Sophos UTM and the webserver. Default is port 80 with Plaintext (HTTP) and port 443 with Encrypted (HTTPS).

we're using our sharepoint with the waf on port 443 (+ http redirect) and the sharepoint central administration on port 10000

edit: our utm is on 9.5, but I'm pretty sure this was also working in a previous version like 9.4

Sorry i have mixed up my comments.

It should be, i prefer the IIS to be on server load balancing so that i can fully utilize the weigh option. I have the rest of the HA servers running on behind WAF. WAF works real fine and everything behind the Server load balancing will not be able to access from External ip. I read the logs. I have seen something about "default drop"

Alone among the logs, the Firewall Live Log presents abbreviated information in a format easier to read quickly.  Usually, you can't troubleshoot without looking at the corresponding line from the full Firewall log file.  Please post one line corresponding to the problem you saw.

Cheers - Bob