<?xml version="1.0" encoding="UTF-8" ?>
<?xml-stylesheet type="text/xsl" href="https://community.sophos.com/cfs-file/__key/system/syndication/rss.xsl" media="screen"?><rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:slash="http://purl.org/rss/1.0/modules/slash/" xmlns:wfw="http://wellformedweb.org/CommentAPI/"><channel><title>publish two web server app using two IP publique</title><link>https://community.sophos.com/sophos-xg-firewall/f/discussions/133991/publish-two-web-server-app-using-two-ip-publique</link><description>I have two public IP addresses behind a sophos XG, I need to publish two web servers in the DMZ zone.
I created the publishing rules for both servers. only access to web server 1 is allowed from IP1 address. access to web server 2 from IP2 address is</description><dc:language>en-US</dc:language><generator>Telligent Community 12</generator><item><title>RE: publish two web server app using two IP publique</title><link>https://community.sophos.com/thread/493830?ContentTypeID=1</link><pubDate>Thu, 21 Apr 2022 10:55:51 GMT</pubDate><guid isPermaLink="false">4be5eb7d-caa4-4ff5-8e60-8f9463545a35:178520c7-ada4-4f44-8ee2-1c1b514f634e</guid><dc:creator>Hamidi My abdellah</dc:creator><description>&lt;p&gt;thanks for your replay,&lt;/p&gt;
&lt;p&gt;I can access webserver1 from url: http://IP1 but i can&amp;#39;t access webserver2 from url : http://IP2&lt;/p&gt;
&lt;p&gt;when I change the weight,&amp;nbsp;&lt;span&gt;I can access webserver2 from url: http://IP2 but i can&amp;#39;t access webserver1 from url :&amp;nbsp;&lt;/span&gt;http://IP1&lt;/p&gt;&lt;div style="clear:both;"&gt;&lt;/div&gt;</description></item><item><title>RE: publish two web server app using two IP publique</title><link>https://community.sophos.com/thread/493829?ContentTypeID=1</link><pubDate>Thu, 21 Apr 2022 10:44:49 GMT</pubDate><guid isPermaLink="false">4be5eb7d-caa4-4ff5-8e60-8f9463545a35:5c4e1478-e81a-43a8-bb02-8d892469964c</guid><dc:creator>QC</dc:creator><description>&lt;p&gt;Hello &lt;span&gt;Hamidi My abdellah&lt;/span&gt;,&lt;/p&gt;
&lt;p&gt;you&amp;#39;ve shown the internal addresses but not the public part and, at least to me, it&amp;#39;s not quite clear what you want to achieve. &lt;br /&gt;You have two public addresses (IP1 and IP2)&amp;nbsp; from two ISPs, correct? And you have two FQDNs for the web servers that resolve to ... which public IP? Or how is your setup? And is the problem that regardless of the public IP you specify (IP1 or IP2) you reach either WebServer1 or WebServer2 depending on the configured weight? Hm, I think I&amp;#39;ve missed some part ...&lt;/p&gt;
&lt;p&gt;&lt;/p&gt;
&lt;p&gt;Christian&lt;br /&gt; .&amp;nbsp;&lt;/p&gt;&lt;div style="clear:both;"&gt;&lt;/div&gt;</description></item><item><title>RE: publish two web server app using two IP publique</title><link>https://community.sophos.com/thread/493825?ContentTypeID=1</link><pubDate>Thu, 21 Apr 2022 09:55:27 GMT</pubDate><guid isPermaLink="false">4be5eb7d-caa4-4ff5-8e60-8f9463545a35:0d2b352c-7df5-4a6e-b28d-4358d1d3db16</guid><dc:creator>Hamidi My abdellah</dc:creator><description>&lt;p&gt;&lt;span lang="en"&gt;I have two public IP addresses from two ISP And I want to publish two Web server in DMZ zone (web server1&amp;nbsp;&amp;nbsp;and webserver 2).&lt;/span&gt;&lt;/p&gt;
&lt;p&gt;&lt;span lang="en"&gt;I have&amp;nbsp;&lt;/span&gt;&lt;span lang="en"&gt;two active gateways,&lt;/span&gt;&lt;/p&gt;
&lt;p&gt;&lt;img src="/resized-image/__size/1280x960/__key/communityserver-discussions-components-files/126/pastedimage1650534970489v3.png" alt=" " /&gt;&lt;/p&gt;
&lt;p&gt;I can access web server 1 from internet but not web server 2. when I change the weight of gateway 1 to 1 and gateway 2 to 0 I can access webserver 2 and not web server1&lt;/p&gt;
&lt;p&gt;how to access the two web server from two Ips addresses . Thanks&lt;/p&gt;
&lt;p&gt;&lt;span lang="en"&gt;&lt;/span&gt;&lt;/p&gt;&lt;div style="clear:both;"&gt;&lt;/div&gt;</description></item><item><title>RE: publish two web server app using two IP publique</title><link>https://community.sophos.com/thread/493816?ContentTypeID=1</link><pubDate>Thu, 21 Apr 2022 07:42:42 GMT</pubDate><guid isPermaLink="false">4be5eb7d-caa4-4ff5-8e60-8f9463545a35:21c4e7d1-eaca-44da-9016-55becdfa0c34</guid><dc:creator>RaveNet</dc:creator><description>&lt;p&gt;I assume you are using NAT rules currently.&lt;/p&gt;
&lt;p&gt;Switch to WAF, aka web application firewall, as this is reverse proxy and if you use appropriate certificates, or even a wildcard cert, can reverse proxy multiple web servers on same IP.&lt;/p&gt;&lt;div style="clear:both;"&gt;&lt;/div&gt;</description></item></channel></rss>