topic Re: Enabling a Systems Maintenance page for systems at the PA? in General Topics

Enabling a Systems Maintenance page for systems at the PA?

OMatlock — Wed, 12 Jul 2017 21:00:47 GMT

Hi folks,

We have a public IP that NATs to an internal Barracuda Load Balancer VIP that represents several sites, content rules, etc.

I am being asked if we could temporarily change the NAT translation at the firewall to redirect to a maintenance page while we take these servers down for patching, instead of editing rules at the Load Balancer.

It sounds possible to me, just change the NAT rule temporarily to a Web Server that has the appropriate maintenance page and then change it back after patching.

Does that sound right? Or would there be a better or more best practice way to handle this?

Re: Enabling a Systems Maintenance page for systems at the PA?

TranceforLife — Wed, 12 Jul 2017 21:12:44 GMT

Hi,

Yeah, why not. This should work fine. In your DNAT policy change destination ip to your temporary server ip address as you have already mentioned.

Re: Enabling a Systems Maintenance page for systems at the PA?

reaper — Thu, 13 Jul 2017 07:46:01 GMT

Yes, that will work just fine