This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

HTTP/S bookmarks retiring

Hi,
On my XG125 I see this message since the last update:

Retiring HTTP/S bookmarks in the next major feature release. Use web server protection rules as an alternative.

I use those bookmarks to access internal web servers from the portal, how can I achieve this without HTTP/S bookmarks?
How can I dismiss this warning?
Thanks!
Andrea

This thread was automatically locked due to age.

Parents

0 Andre_x over 5 years ago

Am I the only that uses HTTP/S bookmarks and don't know what to do after they'll be removed?
Cancel
Vote Up 0 Vote Down

Cancel
0 MichalKawecki over 5 years ago in reply to Andre_x

No. We also use it because our production application server uses the old version of Apache and we can not put it in the world. However, the module implemented in XG Firewall works much worse than in the old CyberoamOS and has significant functional limitations. For example, javascript does not work. This is the only reason why one of our routers is still running on the old CyberOS firmware.
Personally, I am very surprised that instead of gradually adding and developing new functionalities, SFOS collapses ...
Cancel
Vote Up 0 Vote Down

Cancel
0 Andre_x over 5 years ago in reply to MichalKawecki

I'm happy that I've tested it before start selling it to my customers!
I will definitely look for another product to resell!
Cancel
Vote Up 0 Vote Down

Cancel
0 LuCar Toni over 5 years ago in reply to Andre_x

Hi,

to be honest, i never saw a customer using this Bookmark. They instead using the WAF, which is more likely the better approach to protect a HTTPs Site.

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Cancel
0 Bill Roland over 5 years ago in reply to LuCar Toni

I've used it in the past to give a vendors access to RDP or web apps inside our network without having to give them VPN access. It was convenient and worked well enough, but having said that, I can't say I'll miss it. I understand others may not feel that way however.
Cancel
Vote Up 0 Vote Down

Cancel
0 LuCar Toni over 5 years ago in reply to Bill Roland

Bookmarks still persist, only the HTTP/s Bookmarks will be replaced.

So RDP etc.

And as far as i know, you should be able to nearly complete every task with WAF.

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Cancel
0 Bill Roland over 5 years ago in reply to LuCar Toni

LuCar Toni said:

Bookmarks still persist, only the HTTP/s Bookmarks will be replaced.

So RDP etc.

And as far as i know, you should be able to nearly complete every task with WAF.

WAF requires purchasing a license though, correct?
Cancel
Vote Up 0 Vote Down

Cancel
0 LuCar Toni over 5 years ago in reply to Bill Roland

You would need Webserver Protection.

As HTML5 Bookmarks would need Network Protection.

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Cancel
0 MichalKawecki over 5 years ago in reply to LuCar Toni

Will I be able to use WAF to secure access to an unprotected http service with the ssl certificate and give it only to selected users - as I can do with http bookmarks?
Cancel
Vote Up 0 Vote Down

Cancel
0 MichalKawecki over 5 years ago in reply to LuCar Toni

LuCar Toni said:

You would need Webserver Protection.

As HTML5 Bookmarks would need Network Protection.

In CyberoamOS, basic protection was enough.
Cancel
Vote Up 0 Vote Down

Cancel
0 LuCar Toni over 5 years ago in reply to MichalKawecki

You would create WAF Rule with Backend Authentication.

https://community.sophos.com/kb/en-us/126470

The WAF will only provide access to the http site (as HTTPS), if you are authenticated.

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Cancel
0 MichalKawecki over 5 years ago in reply to LuCar Toni

Looks promising. Thank you.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 MichalKawecki over 5 years ago in reply to LuCar Toni

Looks promising. Thank you.
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data