Web Server on VLAN

Hello Everyone,

I am having a little configuration issue with my web server on a VLAN. All my VLANs have internet access but I can't seem to access my web server from outside my network. Can anyone post an example firewall rule from Public IP to VLAN please?

Thanks

Mark

Added TAGs
[edited by: Erick Jan at 9:38 AM (GMT -7) on 14 Aug 2024]

Top Replies

Bharat J 21 days ago in reply to Bossmanuk +2 verified

By looking into traffic with tcpdump we have updated DNAT rule Inbound Interface as ANY and Outbound interface as VLAN website started working

Parents

0 Mayur Makvana 28 days ago

Hello,

Thank you for contacting Sophos Community!

You need to create the DNAT.

docs.sophos.com/.../index.html

docs.sophos.com/.../index.html

Mayur Makvana
Technical Account Manager | Sophos Technical Support
Sophos Support Videos | Knowledge Base | @SophosSupport | Sign up for SMS Alerts |
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Reject Answer

Cancel
0 Erick Jan 28 days ago in reply to Mayur Makvana

Hi,

In addition, you may also use Sophos Assistant to configure DNAT.

Erick Jan
Community Support Engineer | Sophos Technical Support
Sophos Support Videos | Product Documentation | @SophosSupport | Sign up for SMS Alerts
If a post solves your question use the 'Verify Answer' link.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Bossmanuk 27 days ago in reply to Erick Jan

Hi Erick,

I have tried using Sophos Assistant to configure DNAT and it creates the rules but I am still not getting any traffic on my web server.

Thanks

Mark
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Vivek Jagad 27 days ago in reply to Bossmanuk

You may refer - Configure a port forwarding rule.

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Global Support & Services

Log a Support Case | Sophos Service Guide
Best Practices – Support Case

Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Erick Jan 27 days ago in reply to Vivek Jagad

Hi

Again, to further check, do a packet capture/tcpdump to see what has transferred with the packet.

Erick Jan
Community Support Engineer | Sophos Technical Support
Sophos Support Videos | Product Documentation | @SophosSupport | Sign up for SMS Alerts
If a post solves your question use the 'Verify Answer' link.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Bossmanuk 27 days ago in reply to Erick Jan

Hi Erick,

I did a packet capture and no traffic is being translated from WAN to LAN/VLAN. I have manually followed https://docs.sophos.com/nsg/sophos-firewall/19.5/Help/en-us/webhelp/onlinehelp/AdministratorHelp/RulesAndPolicies/NATRules/RulesPoliciesCreateDNATAndFirewallRulesForInternalServers/index.html#specify-firewall-rule-settings-for-the-dnat-rule and created the rules.

No incoming traffic is being translated to the LAN/VLAN port.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Erick Jan 27 days ago in reply to Bossmanuk

Hi,

Kindly make a test firewall rule from WAN going to your web server and put it on the top FW policy.

Also, check logviewer/packet capture.

Erick Jan
Community Support Engineer | Sophos Technical Support
Sophos Support Videos | Product Documentation | @SophosSupport | Sign up for SMS Alerts
If a post solves your question use the 'Verify Answer' link.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 dirkkotte 27 days ago in reply to Bossmanuk

hi,

nearly every time, the wizzard creates a running config, if correct parameters are provided.
what do you use for external port/ip ?
try ##Port2 (or your WAN interface) for example

Dirk

Systema Gesellschaft für angewandte Datentechnik mbH // Sophos Platinum Partner
Sophos Solution Partner since 2003
If a post solves your question, click the 'Verify Answer' link at this post.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

Reply

0 dirkkotte 27 days ago in reply to Bossmanuk

hi,

nearly every time, the wizzard creates a running config, if correct parameters are provided.
what do you use for external port/ip ?
try ##Port2 (or your WAN interface) for example

Dirk

Systema Gesellschaft für angewandte Datentechnik mbH // Sophos Platinum Partner
Sophos Solution Partner since 2003
If a post solves your question, click the 'Verify Answer' link at this post.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

Children

No Data