NS-5GT port Fowarding to web servers

[mhypolite]

Good day all, I have 2 web servers behind an NS-5GT each run iis with multiple secure websites using host headers. How can I setup port forwarding on the netscreen to forward traffic on port 443 to the correct webserver based on the hostname

Thanks.

 

[Packet7]

Hi,

How many public IP's do you have? Typically, you would have two MIPs configured on Untrust and two Policies (Untrust to Trust via MIP, permit HTTPs). You would then match your A records to the appropriate fqdn's/IP's. The host header config would be done on your web servers. If you have only one IP, it might get a little tricky. Let me know.

Rgds,

John

 

[mhypolite]

I only have one public IP, before the customer had ISA server where the rules were created using the hostname of the site and isa routed accordingly based on the hostname.

So how I am trying to get the same working with the netscreen

 

[Packet7]

Hello,

I don't think you can. However, I will let someone else comment. Anyone?

Rgds,

John