INTELLIGENT WORK FORUMS
FOR COMPUTER PROFESSIONALS

Member Login

Come Join Us!

Are you a
Computer / IT professional?
Join Tek-Tips now!

Talk With Other Members
Be Notified Of Responses
To Your Posts
Keyword Search
One-Click Access To Your
Favorite Forums
Automated Signatures
On Your Posts
Best Of All, It's Free!

*Tek-Tips's functionality depends on members receiving e-mail. By joining you are opting in to receive e-mail.

LINK TO THIS FORUM!

Tek-Tips LinkedIn^® Group

Join our
LinkedIn^® Group!

Hook up with past and present colleagues and classmates quickly.

Partner With Us!

"Best Of Breed" Forums Add Stickiness To Your Site

(Download This Button Today!)

Feedback

"...Just to let you know...what a great site you have. I posted a pretty generic question yesterday and have had 8 responses already, anyway thanks again and keep up the good work..."

More...

Geography

Where in the world do Tek-Tips members come from?

Click Here To Find Out!

Tek-Tips Shirts!

Get your
Tek-Tips Forums
SWAG here!

Home > Forums > MIS/IT > Security Solutions > NetScreen solutions Forum

NS-5GT port Fowarding to web servers

Read More Threads Like This One

mhypolite (Vendor)

12 Sep 07 19:10

Good day all, I have 2 web servers behind an NS-5GT each run iis with multiple secure websites using host headers. How can I setup port forwarding on the netscreen to forward traffic on port 443 to the correct webserver based on the hostname

Thanks.

Packet7 (IS/IT--Management)

12 Sep 07 20:37

Hi,

How many public IP's do you have? Typically, you would have two MIPs configured on Untrust and two Policies (Untrust to Trust via MIP, permit HTTPs). You would then match your A records to the appropriate fqdn's/IP's. The host header config would be done on your web servers. If you have only one IP, it might get a little tricky. Let me know.

Rgds,

John

mhypolite (Vendor)

12 Sep 07 20:44

I only have one public IP, before the customer had ISA server where the rules were created using the hostname of the site and isa routed accordingly based on the hostname.

So how I am trying to get the same working with the netscreen

Packet7 (IS/IT--Management)

12 Sep 07 21:10

Hello,

I don't think you can. However, I will let someone else comment. Anyone?

Rgds,

John

Reply To This Thread

Posting in the Tek-Tips forums is a member-only feature.

Click Here to join Tek-Tips and talk with other members!

Back To Forum

Back To NetScreen solutions