Sophos UTM: Decommissioning of obsolete URL categorization services CFFS.Click here for important info.

Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 6 replies
  • Answers 1 answer
  • Subscribers 34 subscribers
  • Views 1868 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Webserver Protection for Host behind IP tunnel

Linus Haake

Hello everybody,

I'm currently trying to establish the WAF setup for the current confirguration:

Two sites are connected via IP Tunnel and everything is properly working with the static routes  set-up. Now we have the need to setup Webserver Protection for a host that is located behind the IP tunnel.

I've had several attempts with using NAT rules (Masquerading / SNAT), but I still see error 503 in the browser when checking the connection.

Any idea if this can work at all? Meanwhile I'm afraid that the packets cannot find the way back, since there is no routing definition for the "WAN" request, coming from the other side of the Ip tunnel.

Many thanks for any hint!



This thread was automatically locked due to age.
Unfiltered HTML