Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

virtual webserver using TLS/SSL and with multiple vhosts

Hello,

I have been able to set up SOPHOS UTM 9 to work with a small webserver on port 80. For doing this I followed the following tutorial:

https://www.howtoforge.com/how-to-protect-your-web-server-with-sophos-utm

and 

http://www.sophos.com/en-us/support/knowledgebase/120388.aspx

I am now trying to set allow my apache vhosts to be exposed onto the internet however I have a few questions I wanted to ask you first:

When adding a new virtual webserver (for port 443) should I pick "Type Encrypted"? If I do so then why do I need to select a certificate there? I already generated a self signed cirtificate on my server so why do I need one there too? If that is the case then I would have a certificate for multiple different domains? 

How can I make this work with apache vhosts? 

If anyone has got this to work please let me know.
Thank you
George


This thread was automatically locked due to age.
Parents
  • If you don't want to proxy the connections or mess with certificates on the UTM in WAF, then you could allow the traffic with a simple DNAT.  The trade off being that the traffic couldn't/wouldn't be scanned.

    from: Internet IPv4
    Service: HTTPS
    Going to: External WAN (Address)
    Action
    change destination to:
    Your servers internal IP
    and the service to: leave blank
    auto firewall rule selected
Reply
  • If you don't want to proxy the connections or mess with certificates on the UTM in WAF, then you could allow the traffic with a simple DNAT.  The trade off being that the traffic couldn't/wouldn't be scanned.

    from: Internet IPv4
    Service: HTTPS
    Going to: External WAN (Address)
    Action
    change destination to:
    Your servers internal IP
    and the service to: leave blank
    auto firewall rule selected
Children
No Data