This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

WAF

Hi,

I'm trying to use Web Application Firewall to protect web servers behind NAT. Currently I have configured firewall to accept HTTP traffic and forward it to internal server. So my question is, in case of WAF, is NAT required to exist or it's automatically translated? Seems like I can not make it work, it simply forwards all traffic.

Thanks

This thread was automatically locked due to age.

0 Vishal_R over 2 years ago

Hi Lev Anni : Thank you for connecting with the Sophos community team. No NAT rule is not required, only in the Firewall rule, the WAF rule is fine to submit the request to the WAF module (reverseporxy). If any matching rule in the NAT rule section is found for the same traffic then it will act as in DNAT in place of WAF.

Regards,

Vishal Ranpariya
Technical Account Manager | Sophos Technical Support
Sophos Support Videos | Knowledge Base | @SophosSupport | Sign up for SMS Alerts |
If a post solves your question use the 'Verify Answer' link.
Cancel
Vote Up 0 Vote Down

Cancel
0 Lev Anni over 2 years ago in reply to Vishal_R

thanks a lot!!!
Cancel
Vote Up 0 Vote Down

Cancel
0 Lev Anni over 2 years ago in reply to Vishal_R

Seems like my previous post did't go through :/

What is very interesting to me, we are going to protect at least 1000 web sites hosted under one up address. Is it possible to create one single WAF rule for them or it is required to create separate rules one by one, and upload their certificates? Is creating a web server enough and by itself means it is generally protected?
Cancel
Vote Up 0 Vote Down

Cancel