topic Re: Internal Web/App server access in General Topics

Internal Web/App server access

Prabulingam_N1 — Wed, 28 Feb 2018 08:57:39 GMT

Dear All,

We have a challenge as:

Internal hosted Application/WebServer .

Public IP is Natted inorder for External people to access internal Application.

1. https://company.com/abc
2. https://company.com/xyz

The above 2 sites were hosted in same server.

---Now we want to allow only 2nd site accessing from outside and want to block 1st site if accessed from outside.

---www.company.com resolves with 1.1.1.1 (example of public IP)

---We are unable to achieve this in Application/URL rule (No MobileAccess Blade used)
Like Source as "ANY, Destination as custom URL (https://company.com/abc) and Action as "BLOCK".

---Cannot used Port based access/block in Firewall since both will use https only.

Any suggestions or help is appreciated.

Regards, Prabulingam.N

Re: Internal Web/App server access

Marco_Valenti — Wed, 28 Feb 2018 09:27:52 GMT

my guess is to have a try with url defined as regex , create a custom category and assign to a list or a single url defined as regex and then add in a block or allow rule

Re: Internal Web/App server access

Norbert_Bohusch — Wed, 28 Feb 2018 20:01:27 GMT

As this is HTTPS the big question is if HTTPS Inspection is enabled for the inbound traffic!

Re: Internal Web/App server access

Prabulingam_N1 — Fri, 09 Mar 2018 06:29:38 GMT

Dear Marco/Norbert,

TAC has informed that we may not have control on specific Internal web domain since the Application/URL will be for Internal to External.

Thanks for your inputs.

Regards, Prabulingam.N