This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Webserver Protection

Hi guys

please help me....

I am trying to activate our webserver protection 

the scenario is this 

fist I made a realwebserver

Second is 

 

Here's my question every time I try to access our site here's what 's happening

but if I add the public i.p in the additional address (that I input in the domain of virtual webserver),

its working but I need to put an https in the start of the url because if I didn't input here's the error that I receive..

 

I hope you can help me with these problem

 

Thanks

 

Earl Notarte



This thread was automatically locked due to age.
  • Hi Earl,

    Is the website on a server inside your network?  Is the "Eastern" interface a WAN connection or a LAN connection?  Is there a reason you chose to do HTTPS on port 80 instead of TCP 443?

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • Hi Bob 

     

    the eastern is our Wan Connection, I'am new to webserver protection feature of sophos firewall

     

    Best regards 

    earl 

  • Here's what I would try to start with:

    • Real Server with "Plaintext (HTTP)" on port 80.
    • Virtual Server with "Encrypted (HTTPS) & redirect" on port 443 with nothing selected in 'Advanced'

    Then, start the Web Application Firewall Live Log and attempt to access your site from outside of the LAN.  If you get an error, show us several lines from the log that correspond to the error.

    You didn't tell us what your web server is running, whether it uses authentication, etc., so it's hard to recommend any specific settings.  You will want to experiment.

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • Hi Bob

     I will do that tomorrow morning as soon as I arrived at the office,

    by the way our web server is connected on our local network and runs inside IIs service.

    thanks