Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 1 reply
  • Answers 1 answer
  • Subscribers 2 subscribers
  • Views 1505 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

WAF & SNAT

Louis-M

Been a while so apologies....

If you have a webserver behind WAF, does the webserver reply on the address the WAF is using?

eg. webserver sits on a subnet that is maquarading to PUBLIC IP X, WAF is using PUBLIC IP Y for https

In the above example, does the webserver reply to https requests on PUBLIC IP Y but will try to get out to the internet for all other protocols eg windows update via PUBLIC IP X?



This thread was automatically locked due to age.
  • 0

    Yes, since the incoming request would be on the port and URL specified withing WAF configuration on UTM and also on Webserver, any incoming web request will be replied from the same IP. For example, if your website is hosted on X address and you've configured it on UTM and on WAF to forward it to your Webserver, it will be replying using that same X address.

    For all other traffic going out of your Webserver to the Internet, since the destination port will be different and services as well, it will go ahead using MASQ or SNAT rule (if any) specified in your UTM.

    Regards

    Jaydeep

Unfiltered HTML