Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
EvilGenius
Explorer
Jump to solution

Reverse Proxy Configuration

I am having problem in configuring a Reverse Proxy.  NOTE: I primarily want the Firewall IP Address to redirect the user to a Webserver hosted inside the LAN subnet. Is there any references or documentation which I can utilize? I did find an official documentation regarding reverse proxy but it says that Configuring reverse proxy is only possible through CLI and once I try the given syntax it gives an error 

 

> ReverseProxyCLI on

Error: The parameters of ReverseProxyCLI command should be provided in pairs (key and value). You have provided an odd number of parameters which suggests that you are probably missing a parameter.

0 Kudos
2 Solutions

Accepted Solutions
PhoneBoy
Admin
Admin

You need to connect to the relevant gateway with ssh and enter that command in expert mode.
SmartConsole CLI cannot be used here.
Start here for MAB Reverse Proxy functionality: https://support.checkpoint.com/results/sk/sk110348 

However, if it’s a single website you want to provide access to, you should be able to do it with a NAT rule versus configuring Reverse Peoxy.

View solution in original post

(1)
PhoneBoy
Admin
Admin

Reverse Proxy is for when there are multiple servers available via different URIs using the same IP.
For a single server, you can use a NAT rule like:

  • Original: Any
  • Destination : x.x.x.x (public ip)
  • Original Service : https
  • Translate Source : Original
  • Translate Dest : z.z.z.z (local ip)
  • Translate Service : 443

 

View solution in original post

3 Replies
PhoneBoy
Admin
Admin

You need to connect to the relevant gateway with ssh and enter that command in expert mode.
SmartConsole CLI cannot be used here.
Start here for MAB Reverse Proxy functionality: https://support.checkpoint.com/results/sk/sk110348 

However, if it’s a single website you want to provide access to, you should be able to do it with a NAT rule versus configuring Reverse Peoxy.

(1)
EvilGenius
Explorer

To be more specific, my requirement is to host a BWAPP server on an ubuntu machine and configure the firewall public IP address to redirect the traffic coming from a WAN towards the BWAPP server. Furthermore after successfully configuring this the requirement is also to enable HTTPS inspection for this. Is there a compulsion to use Reverse Proxy or can you please elaborate a bit on how a NAT rule can be established to do this. 

0 Kudos
PhoneBoy
Admin
Admin

Reverse Proxy is for when there are multiple servers available via different URIs using the same IP.
For a single server, you can use a NAT rule like:

  • Original: Any
  • Destination : x.x.x.x (public ip)
  • Original Service : https
  • Translate Source : Original
  • Translate Dest : z.z.z.z (local ip)
  • Translate Service : 443

 

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.