This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

New to SOPHOS XG and Frustrated with SSL and Port Forwarding

Hello All,

Im new to the Sophos family and I have had 3 full days of frustration with trying to install and configure this appliance to work with my Synology NAS. Prior to using a SOPHOS FW I just used a home Linksys router and forwarded ports to the NAS. It was working great, I had SSL working along with other applications running on the NAS.

My problem is I'm not really sure on the process for setting up the more advanced firewall and getting the NAS publicly accessible with SSL. Previously I has my HTTPS/443 forwarded directly to the NAS so when I used entered my domain name It went directly to my NAS login page. I cant get this to work with SOPHOS XG.

I also don't understand the process for enabling the XG to use SSL authentication.

I guess a I need some basic installation help to templates to get me going.

This thread was automatically locked due to age.

Parents

0 lferrara over 4 years ago

Yendor,

as starting point, please follow this kb:

https://community.sophos.com/kb/en-us/126470

if it does not work, as Ian suggested, post the WAF rule.

Regards
Cancel
Vote Up 0 Vote Down

Cancel
0 Yendor over 4 years ago in reply to lferrara

So Im still having issues with getting reverse proxy to work with this WAF rule. Im not quite sure how this works with sophos. Do I set up the reverse proxy on the Synology system of does WAF take care of this? Also How and or what certificates do I use (LetsEncrypt) in the WAF Rule? I tried uploading the ones I get from lets encrypt through the Synology process however the WAY does not recognize them

Im pretty sure the firewall is not allowing the reverse proxy to work. I run www.ssllabs.com/.../analyze.html and I get this result to there is some type of communication with the NAS if Im not mistaken.
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk over 4 years ago in reply to Yendor

Hi,

The NAS only need to know about the network and the certifcate so traffic gets scanned and passed by the XG, the XG WAF does all the rest.

Ian

XG115W - v20.0.3 MR-3 - Home

XG on VM 8 - v21 GA

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 Yendor over 4 years ago in reply to rfcat_vk

Ok, how does that happen with a WAF rule? The certs that the sinology lets encrypt app provides are not recognized by the XG
Cancel
Vote Up 0 Vote Down

Cancel
0 lferrara over 4 years ago in reply to Yendor

Yendor,

If you want that external users use https, you need to fix the certificate issue first.

Before you even upload the certificate on XG, you need to upload the CA that released that certificate.

So, what is the issue you have with that?

Thanks
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 lferrara over 4 years ago in reply to Yendor

Yendor,

If you want that external users use https, you need to fix the certificate issue first.

Before you even upload the certificate on XG, you need to upload the CA that released that certificate.

So, what is the issue you have with that?

Thanks
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data