This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

From internet to DMZ

Hello,

I'm reconfiguring my fw (latest OS version), changing the zone and IP of my reverse proxy, from LAN to DMZ.

Externally I'm able to reach my web sites with the RP on LAN, but if I change the zone and internal IP in firewall rule and NAT rules I'm not able to reach them again.

I tried to:

- create new NAT rule, disabling the others

- disable the second ethernet card on RP that was on LAN

I don't read anything in the log, it seems that nothing is routed by the fw.

Any suggestions?

This thread was automatically locked due to age.

Parents

0 Mayur Makvana 4 months ago

Hello,

Thank you for contacting Sophos Community!

Are you configuring WAF or DNAT?

https://docs.sophos.com/nsg/sophos-firewall/19.5/Help/en-us/webhelp/onlinehelp/AdministratorHelp/RulesAndPolicies/WebServerProtection/WAF/Rules/WAFRuleAdd/index.html

https://docs.sophos.com/nsg/sophos-firewall/19.5/Help/en-us/webhelp/onlinehelp/AdministratorHelp/RulesAndPolicies/NATRules/NATDNATServerAccessAssistant/index.html

Else, you may help us with configuration snapshots along with the tcpdump/drop while accessing the server.

Mayur Makvana
Technical Account Manager | Global Customer Experience
Sophos Support Videos | Knowledge Base | @SophosSupport | Sign up for SMS Alerts |
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Mayur Makvana 4 months ago

Hello,

Thank you for contacting Sophos Community!

Are you configuring WAF or DNAT?

https://docs.sophos.com/nsg/sophos-firewall/19.5/Help/en-us/webhelp/onlinehelp/AdministratorHelp/RulesAndPolicies/WebServerProtection/WAF/Rules/WAFRuleAdd/index.html

https://docs.sophos.com/nsg/sophos-firewall/19.5/Help/en-us/webhelp/onlinehelp/AdministratorHelp/RulesAndPolicies/NATRules/NATDNATServerAccessAssistant/index.html

Else, you may help us with configuration snapshots along with the tcpdump/drop while accessing the server.

Mayur Makvana
Technical Account Manager | Global Customer Experience
Sophos Support Videos | Knowledge Base | @SophosSupport | Sign up for SMS Alerts |
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 Gino Pino 4 months ago in reply to Mayur Makvana

Hi, thanks for your answer. I use DNAT, but with resources in DMZ it doesn't work. It works perfectly for resources on LAN zone.
Cancel
Vote Up 0 Vote Down

Cancel