This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

RWA help!

Can anyone let me know or guide me if Microsoft "remotewebaccess" has been successfully configure for 2012R2 essential? It's 2:30am and i'm still trying to figure out how to get this thing to work. I'd Google it and follow a few direction without any success on my home UTM, essential just kept failing to detect the server connectivity. I don't know if I have to get the original cert to load in the utm to work or i'm just missing something. This is one of the instruction I follow without any success.

Fastvue Sophos Reporter How To Publish Websites with Sophos UTM Web Server Protection

If you guys have any idea please chime in, i'm stuck.

Thanks fellas.

This thread was automatically locked due to age.

0 BAlfson over 9 years ago

Yeah, I think you were up too late! [;)] You posted in the VPN forum and linked to an article about Webserver Protection - I'll move this thread to that forum.

You do need to install the CA and certificate in the UTM so that you can create a Virtual Server with HTTPS access.

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
0 1clicc over 9 years ago

Thanks Bob. Do you have any idea where I should look?
Cancel
Vote Up 0 Vote Down

Cancel
0 BarryG over 9 years ago

Start in WebServer Protection...

Or if you want to use NATs instead, see
https://community.sophos.com/products/unified-threat-management/astaroorg/f/57/t/50114

Barry
Cancel
Vote Up 0 Vote Down

Cancel
0 1clicc over 9 years ago

Hum ... I thought that setting up NAT will do the trick but for some reason it's still not connecting.

My NAT setup

Rule Type: DNAT
For Traffic From: Any
Using Service: HTTPS, HTTP (which are group)
Going to: Externa (WAN Address)
Change the distination to: Server IP

Firewall rule:

Sources: Internal (Network)
Services: HTTPS, HTTP (Which are group)
Distinations: Any

Is there anything else I would need to add? Thanks again.
Cancel
Vote Up 0 Vote Down

Cancel
0 Scott_Klassen over 9 years ago

Do you have Automatic Firewall Rule checked in the DNAT? For troubleshooting purposes, you may want to also enable Log Initial Packets, so you can see the traffic in the firewall log. Change For Traffic From: Any to InternetIPv4.

Very Important: You are testing from a machine out on the internet, correct? Do NOT test this DNAT from a machine in your network. It will not work without further configuration (http://www.sophos.com/en-us/support/knowledgebase/115191.aspx), and possible more depending on if you are using the web filtering proxy.

__________________
ACE v8/SCA v9.3

...still have a v5 install disk in a box somewhere.

http://xkcd.com
http://www.tedgoff.com/mb
http://www.projectcartoon.com/cartoon/1
Cancel
Vote Up 0 Vote Down

Cancel
0 1clicc over 9 years ago in reply to Scott_Klassen

Do you have Automatic Firewall Rule checked in the DNAT?  For troubleshooting purposes, you may want to also enable Log Initial Packets, so you can see the traffic in the firewall log.  Change For Traffic From: Any to InternetIPv4.

Very Important:  You are testing from a machine out on the internet, correct?  Do NOT test this DNAT from a machine in your network.  It will not work without further configuration (UTM: Accessing Internal or DMZ servers from Internal Networks using DNAT), and possible more depending on if you are using the web filtering proxy.

Well ... yeah.  I'm testing inside my network. I'll check the log and inspect it.
Cancel
Vote Up 0 Vote Down

Cancel
0 Scott_Klassen over 9 years ago

I forgot to mention, since this is HTTP/HTTPS traffic and Home use, many of the major ISPs block well known ports inbound for residential customers to keep them from running servers. Their thinking is that if you want to run servers, you should be paying more by getting a business account (more expensive). You'll need to check your ISP terms of service.

__________________
ACE v8/SCA v9.3

...still have a v5 install disk in a box somewhere.

http://xkcd.com
http://www.tedgoff.com/mb
http://www.projectcartoon.com/cartoon/1
Cancel
Vote Up 0 Vote Down

Cancel
0 1clicc over 9 years ago

Local connection work flawlessly but just the online connection to my server failed. I should probably use Teamviewer for any remote access?
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 9 years ago

1clicc, the other reason that folks sometimes can't get a DNAT to work is #3 in Rulz.

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
0 1clicc over 9 years ago

Thanks, I'll try some more. I hate to give up.
Cancel
Vote Up 0 Vote Down

Cancel