Sophos WAF

Hello Joel Muodzi ,

Thank you for reaching out to the community, please refer the troubleshooting guide for WAF. Additionally create a black hole rule to drop packets from unwanted sources from the internet. 

What do you mean exactly with "website is using http"?

Is the website on the inside of your infrastructure accessible using http? Do you want it to be accessible from the outside using HTTPS?
Are the certificates in place?

(I have this scenario https --> WAF --> http [from outside to inside],  have the certicate uploaded tot XG and configured in the WAF rule. Just working fine) 

Hi Peter,

Thank you for the reply. Yes i can access it on HTTP, want to access it on HTTPS on the WAN side. Certificates uploaded on XG, and WAF rule set. The moment i enable WAF rule, site no longer accessible. 403/Forbidden. I can access it on the WAN side with DNAT and WAF rule disabled.

Thank you Vivek,

Now starting the troubleshooting steps from the steps you sent.

Do you disable DNAT after enabling the WAF rule?

Yes DNAT disabled after enabling WAF rule