asked on 8/27/2013

Multiple secure websites behind Sonicwall NSA 240

Hello,

i've got a Sonicwall NSA240 firewall and just one public IP address. I have changed the secure management port of the Sonicwall from 443 to 4433, because i needed port 443 to map to my Exchange 2010 server.

The problem now is that i have got another server (2012) where i am hosting another secure website (https) on IIS, which must be accessible from the internet using https!

I can't find the solution to get this thing to work. My hope is all on you guys! ;-)

Grts
Robert Reijnders

Hardware Firewalls Web Servers Networking

Last Comment

Blue Street Tech

8/27/2013

Blue Street Tech

8/27/2013

Hi cAZtricum,

You should get more Public IPs.

I don't understand why you need to change ports. .. you can have many services running on the same ports. If you want to track them just create custom services, e.g. exchange server, hosted exchange and https management is already set by default.

Is there a reason you need to do this?

Where are the servers located. .. in the DMZ?

Three firewall rules should do it with some custom NAT Policies routing the Pub Ips to the servers.

cAZtricum

8/27/2013

ASKER

Well, i have port 443 mapped to my exchange server because of outlook web access. There is another website i am running on IIS 8.0 which i also must access through port 443. So both servers needs to be accessed through the same port/service.

ASKER CERTIFIED SOLUTION

Blue Street Tech

8/27/2013

THIS SOLUTION IS ONLY AVAILABLE TO MEMBERS.

View this solution by signing up for a free trial.

Members can start a 7-Day free trial and enjoy unlimited access to the platform.

See Pricing Options

Start Free Trial

cAZtricum

8/27/2013

ASKER

Thanks Diversiteit. I already feared this was the only solution. Nowadays it isn't so easy to get some extra public IP's. I will contact my ISP, thanks again!

Patrick Bogers

8/27/2013

Hi,

Even you get yourself an extra public ip adress OR you are stuck moving the new website to the same box Exchange is hosted on. This way IIS will determine based on host headers which website is called upon using port 443. (BTW this is not my advise, just a possibillity)

Blue Street Tech

8/27/2013

I'm glad I could!

Why a 'B' though? See the grading guidelines: http://support.experts-exchange.com/customer/portal/articles/481419-what-grade-should-i-award-

Please explain or change to an 'A'.

Thanks, I appreciate it!

Patrick Bogers

8/27/2013

I dont think it is chique to ask for a better grade since we only told him his request is highly impossible?!

cAZtricum

8/27/2013

ASKER

It is a solution but not the one i hoped for, that's why. As Patricksr1972 mentioned, it is a little arrogant to ask for a better grade... Nevertheless thank you for your quick answers!

Blue Street Tech

8/27/2013

Your welcome. It's not arrogance, just following the grading guidelines. :-)
Just because you don't like the answer doesn't change the fact that it is the answer. Thank you for your reply.

Cheers!