Web server and TMG

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements

Web server and TMG

Not applicable

Hello

our web servers are published using tmg

at the moment i have a security rule form l3-trust to l4 untrust with any set

what do i need to do to allow traffic through to the web servers and tmg?

2 REPLIES 2

Not applicable

Hi,

Can you provide a bit more information on your setup? Is your web server published from the inside or from the outsite? Is your web server in your trust zone or is it in a DMZ zone?

If possible (as a test) you can use appid:any and service:any and enable log on session start AND session end.

Then take a peak in the traffic log to see how the traffic is being identified, lets say "sharepoint" (or whatever).

Finally change this rule from any into appid:sharepoint (or whatever you found), service:application-default (or manually specify which TCP/UDP ports you wish to allow) and disable "log on session start" (just keep log on session end).

Dont forget to enable the IPS while your are at it (in the options).

Edit: And if you have SSL traffic you should take a look at enabling SSL-termination so the PA device can inspect the encrypted data aswell...

  • 1941 Views
  • 2 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!