I am trying to use WAF and path specific routing with a NAVISION server. Which uses Microsoft Dynamics NAV.

Actually, I have figured out how to do this.  It is not really well documented, I could find nowhere in the documentation how to do this. 

I have tested my solution and it worked. 

And what was your solution ?

And what was your solution ?

Hi there,

Please try to modify the port number as per your requirement in GUI of WAF configuration. You may share more details on your requirements, it would help us to assist you better.

im trying to get to navservice.example.com/.../project  but i dont get to the usernam/password popup.

i can get yo navhelp.example.com/blablabla.html

im using latest XG FW

using a SSL cert on both navhelp. and navservice. 

Hi there,

Could you please share the error message? Please also check WAF logs from Log viewer of the firewall

in the auth log

says wrong username/password

thats beqause the user is not a xg user

i need to get to the server behind to ask for

credentials not the xg.

if i do make a user in the xg then the popup login

says login sucessfully. but i dont get to the iis server

that i need. so it gets into a loop. asking again

for username/password and if i use the xg user

i get succesfully in the log .. and again and again

Niclas,

can you share the WAF rule?

Thanks

Niclas,

thanks for the screenshots. Nothing in the Web Application firewall log?

Did you try to disable the "pass host header"?

The application in the NAV server had to have Basic Authentication enabled. Most of the applications in the IIS server did not have that enabled. Use Basic with Passthrough on the Business Application Rule. Create a server object in the XG for the NAV server and make sure it uses Basic Authentication with Passthrough.  Look at the URL here

https://servername//DynamicsNAV100/WebClient/ 

servername is your XG firewall

/DynamicsNAV100/WebClient/ -- business application rule you are using 

BAsic with passthrough authentication

NAVISION is your server you defined with 8080 as the port to be redirected to. 

That is how we did it. 

Lance