This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

I am trying to use WAF and path specific routing with a NAVISION server. Which uses Microsoft Dynamics NAV.

The server requires that the HTTP be redirected to port 8080,but it seems there is no setting for this in the path specific rules. Redirect HTTP is an option but there is no configuration for the redirect. How do you do this in the XG 135 UI? Can it be done on the SSH console instead. The path redirects work fine with our other applications on http port 80. The XG will be used to forward path specific URLs to the internal servers. We did this previously with ISA Server 2006 and it allowed us to control the redirect (under bridging tab). Is this a shortcoming of the XG 135?

This thread was automatically locked due to age.

Top Replies

Lance Ecklesdafer over 4 years ago in reply to Niclas Klinterhäll2 +1 verified

The application in the NAV server had to have Basic Authentication enabled. Most of the applications in the IIS server did not have that enabled. Use Basic with Passthrough on the Business Application…

Parents

0 Lance Ecklesdafer over 5 years ago

Actually, I have figured out how to do this. It is not really well documented, I could find nowhere in the documentation how to do this.

I have tested my solution and it worked.
Cancel
Vote Up 0 Vote Down

Cancel
0 Niclas Klinterhäll2 over 4 years ago in reply to Lance Ecklesdafer

And what was your solution ?
Cancel
Vote Up 0 Vote Down

Cancel
0 Keyur over 4 years ago in reply to Niclas Klinterhäll2

Hi there,

Please try to modify the port number as per your requirement in GUI of WAF configuration. You may share more details on your requirements, it would help us to assist you better.

Regards,

Keyur
Community Support Engineer | Sophos Support
Sophos Support Videos | Knowledge Base | @SophosSupport | Sign up for SMS Alerts |
If a post solves your question use the 'This helped me' link
Cancel
Vote Up 0 Vote Down

Cancel
0 Niclas Klinterhäll2 over 4 years ago in reply to Keyur

im trying to get to navservice.example.com/.../project but i dont get to the usernam/password popup.

i can get yo navhelp.example.com/blablabla.html

im using latest XG FW

using a SSL cert on both navhelp. and navservice.
Cancel
Vote Up 0 Vote Down

Cancel
0 Keyur over 4 years ago in reply to Niclas Klinterhäll2

Hi there,

Could you please share the error message? Please also check WAF logs from Log viewer of the firewall

Regards,

Keyur
Community Support Engineer | Sophos Support
Sophos Support Videos | Knowledge Base | @SophosSupport | Sign up for SMS Alerts |
If a post solves your question use the 'This helped me' link
Cancel
Vote Up 0 Vote Down

Cancel
0 Niclas Klinterhäll2 over 4 years ago in reply to Keyur

in the auth log

says wrong username/password

thats beqause the user is not a xg user

i need to get to the server behind to ask for

credentials not the xg.

if i do make a user in the xg then the popup login

says login sucessfully. but i dont get to the iis server

that i need. so it gets into a loop. asking again

for username/password and if i use the xg user

i get succesfully in the log .. and again and again
Cancel
Vote Up 0 Vote Down

Cancel
0 lferrara over 4 years ago in reply to Niclas Klinterhäll2

Niclas,

can you share the WAF rule?

Thanks
Cancel
Vote Up 0 Vote Down

Cancel
0 Niclas Klinterhäll2 over 4 years ago in reply to lferrara
Cancel
Vote Up 0 Vote Down

Cancel
0 lferrara over 4 years ago in reply to Niclas Klinterhäll2

Niclas,

thanks for the screenshots. Nothing in the Web Application firewall log?

Did you try to disable the "pass host header"?
Cancel
Vote Up 0 Vote Down

Cancel
+1 Lance Ecklesdafer over 4 years ago in reply to Niclas Klinterhäll2

The application in the NAV server had to have Basic Authentication enabled. Most of the applications in the IIS server did not have that enabled. Use Basic with Passthrough on the Business Application Rule. Create a server object in the XG for the NAV server and make sure it uses Basic Authentication with Passthrough. Look at the URL here

https://servername//DynamicsNAV100/WebClient/

servername is your XG firewall

/DynamicsNAV100/WebClient/ -- business application rule you are using

BAsic with passthrough authentication

NAVISION is your server you defined with 8080 as the port to be redirected to.

That is how we did it.

Lance
Cancel
Vote Up +1 Vote Down

Cancel

Reply

+1 Lance Ecklesdafer over 4 years ago in reply to Niclas Klinterhäll2

The application in the NAV server had to have Basic Authentication enabled. Most of the applications in the IIS server did not have that enabled. Use Basic with Passthrough on the Business Application Rule. Create a server object in the XG for the NAV server and make sure it uses Basic Authentication with Passthrough. Look at the URL here

https://servername//DynamicsNAV100/WebClient/

servername is your XG firewall

/DynamicsNAV100/WebClient/ -- business application rule you are using

BAsic with passthrough authentication

NAVISION is your server you defined with 8080 as the port to be redirected to.

That is how we did it.

Lance
Cancel
Vote Up +1 Vote Down

Cancel

Children

No Data