Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 8 replies
  • Subscribers 1 subscriber
  • Views 5241 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Separate real and virtual servers for both HTTP and HTTPS?

Jeff x
I've read the manual and searched the forum but I'm still confused.

I have a web server, email server and an FTP server all on the same box behind Sophos. I have static public IP's and some websites have their own static IP while others share IP's. All websites use both HTTP and HTTPS.

Do I need to set up two (HTTP and HTTPS) virtual and real servers for each public IP address? I'm not understanding the mapping.

On my old router, I just created services for each website and forwarded the needed ports to the corresponding private IP's of each website.


This thread was automatically locked due to age.
Parents
  • 0
    Two different issues.  Webserver Protection is a reverse proxy.  Port forwarding is called "DNAT" in the UTM and is accomplished in 'Network Protection >> NAT'.

    Yes, if you use the reverse proxy, you have to define separate Virtual Servers for each.  If you want, you can have the proxy handle the HTTPS conversation and use a single port-80 Real Server for your server.  That probably will require changes on the web server.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0 in reply to BAlfson
    Two different issues.  Webserver Protection is a reverse proxy.  Port forwarding is called "DNAT" in the UTM and is accomplished in 'Network Protection >> NAT'.


    I could have sworn I read somewhere on the forum that setting up "DNATing" was not necessary if using WebServer Protection. Is that false?

    --------------------------------------------------------------------
    Sophos UTM 9.714-4 - Home User
    Currently testing VM on i3-9100 @ 3.60 GHz
    16 GB RAM
    Dell Optiplex XE
    Intel Core 2 Duo CPU E8600 @ 3.33GHz
    8GB RAM
    --------------------------------------------------------------------

Reply
  • 0 in reply to BAlfson
    Two different issues.  Webserver Protection is a reverse proxy.  Port forwarding is called "DNAT" in the UTM and is accomplished in 'Network Protection >> NAT'.


    I could have sworn I read somewhere on the forum that setting up "DNATing" was not necessary if using WebServer Protection. Is that false?

    --------------------------------------------------------------------
    Sophos UTM 9.714-4 - Home User
    Currently testing VM on i3-9100 @ 3.60 GHz
    16 GB RAM
    Dell Optiplex XE
    Intel Core 2 Duo CPU E8600 @ 3.33GHz
    8GB RAM
    --------------------------------------------------------------------

Children
  • 0 in reply to Jeff x
    I could have sworn I read somewhere on the forum that setting up "DNATing" was not necessary if using WebServer Protection. Is that false?


    Hi,
    You probably still need DNAT for the FTP server, and you need to use the SMTP proxy or DNAT for the mail server.

    Barry
  • 0 in reply to BarryG

    Yes, if you use the reverse proxy, you have to define separate Virtual Servers for each.

    So if I have 5 static public IP's and 8 websites sharing those IP's and each website uses both port 80 and 443, I will have to create 5 Virtual and 5 Real servers if I don't want to mess with HTTPS conversion? Or are only 2 Virtual and 2 Real servers (1 for HTTP and 1 for HTTPS) needed since all websites are hosted on the same physical machine?

    Hi,
    You probably still need DNAT for the FTP server, and you need to use the SMTP proxy or DNAT for the mail server.

    So basically the Webserver Protection is for ports 80, 443 and can be used in place of setting up DNATing and any other servers that use different ports (i.e., mail and FTP server) need DNATing? Is that correct?

    Thanks guys. I really appreciate you sharing your expertise and time.

    --------------------------------------------------------------------
    Sophos UTM 9.714-4 - Home User
    Currently testing VM on i3-9100 @ 3.60 GHz
    16 GB RAM
    Dell Optiplex XE
    Intel Core 2 Duo CPU E8600 @ 3.33GHz
    8GB RAM
    --------------------------------------------------------------------

Share Feedback
×

Submitted a Tech Support Case lately from the Support Portal?