protect internal webserver

Hi TarekHalloun,

I would advise you to create two separate rules for each server. You can create two different Firewall rules to allow only the specific ports needed for each server to be accessed from the internet and also restrict other traffic.

The link applies to Sophos Firewall.

each server has a different port (not running on 80 or 443) 

should i create 2 distinct protection rules?

does your link apply to xg ??

Hello there,

Thank you for contacting the Sophos Community.

If they’re accessible from the WAN, you might want to configure WAF in your Sophos Firewall.

If they aren’t meant to be accessible from the WAN, then ensure you don't have a misconfigured DNAT rule allowing access to your servers.

Regards,