topic Re: Reverse Proxy Configuration in Cloud Firewall

Reverse Proxy Configuration

EvilGenius — Wed, 07 Jun 2023 10:48:48 GMT

I am having problem in configuring a Reverse Proxy. NOTE: I primarily want the Firewall IP Address to redirect the user to a Webserver hosted inside the LAN subnet. Is there any references or documentation which I can utilize? I did find an official documentation regarding reverse proxy but it says that Configuring reverse proxy is only possible through CLI and once I try the given syntax it gives an error

> ReverseProxyCLI on

Error: The parameters of ReverseProxyCLI command should be provided in pairs (key and value). You have provided an odd number of parameters which suggests that you are probably missing a parameter.

Re: Reverse Proxy Configuration

PhoneBoy — Wed, 07 Jun 2023 11:14:34 GMT

You need to connect to the relevant gateway with ssh and enter that command in expert mode.
SmartConsole CLI cannot be used here.
Start here for MAB Reverse Proxy functionality: https://support.checkpoint.com/results/sk/sk110348

However, if it’s a single website you want to provide access to, you should be able to do it with a NAT rule versus configuring Reverse Peoxy.

Re: Reverse Proxy Configuration

EvilGenius — Wed, 07 Jun 2023 11:33:53 GMT

To be more specific, my requirement is to host a BWAPP server on an ubuntu machine and configure the firewall public IP address to redirect the traffic coming from a WAN towards the BWAPP server. Furthermore after successfully configuring this the requirement is also to enable HTTPS inspection for this. Is there a compulsion to use Reverse Proxy or can you please elaborate a bit on how a NAT rule can be established to do this.

Re: Reverse Proxy Configuration

PhoneBoy — Wed, 07 Jun 2023 14:43:38 GMT

Reverse Proxy is for when there are multiple servers available via different URIs using the same IP.
For a single server, you can use a NAT rule like:

Original: Any
Destination : x.x.x.x (public ip)
Original Service : https
Translate Source : Original
Translate Dest : z.z.z.z (local ip)
Translate Service : 443