Same port redirection to two different servers

spoonermullet · May 22

Hi All,

There are two servers in the local network called Prod (10.0.0.15) and Test that are running some software.
The vendor need inbound access to both servers from outside.
Conditions as below.
This following will point to the Test server
https:// test.company.com:6544/Test
The following will point to the Production server
https:// production.company.com:6544/Production

I know I need to create a SNAT for that.
The question is since the port number is the same how to make WatchGuard redirect https:// test.company.com:6544/Test to 10.0.0.16 and https:// production.company.com:6544/Production to 10.0.0.15?

james.carson · May 23

Hi @spoonermullet

You'll need to make a content action via a HTTPS proxy.

See:
(Example: HTTPS Proxy Action with an HTTP Content Action)
https://www.watchguard.com/help/docs/help-center/en-US/content/en-us/Fireware/proxies/examples/content_action_https.html

A SNAT just looks at IP addresses and ports, so it won't be able to tell the difference between the two. A content action looks at the actual URL path.

spoonermullet · May 23

Thanks @james.carson

Can I edit the predefined content or better to create a new one?

Just not sure whether there will be any potential issues if I modify the predefined one.

Bruce_Briggs · May 23

You can’t modify the default one.
Editing it will result in a new one.

Same port redirection to two different servers

Answers