3. Select the users or groups.
4. Click Apply.
Figure 245: Quarantine Digest
Web Server
Web Server Protection provides facilities to manage and add web servers, define protection policies for them and set up certificates.
The following pages are accessible:
•
Web Servers
on page 236: allows you to manage, add and delete settings of web servers connected to your
device.
•
Protection Policies
on page 238: let you define methods to protect your web servers against malicious attacks.
•
Authentication Policies
on page 242: helps to set up authentication policies for direct access to Sophos
Firewall.
•
Authentication Templates
on page 244: sets up customized HTML login forms.
•
Certificates
on page 514: manages certificates for authentication.
•
Certificate Authorities
on page 516: manages certificate authorities which issue certificates.
•
Certificate Revocation Lists
on page 517: gives an overview of revoked certificates.
Web Servers
The Web Servers menu allows you to add web servers that are to be protected by the WAF.
This page displays all existing web servers. For each web server, the list shows:
Name
Name of the web server.
Host
Host name of the web server.
Type
Type of communication between Sophos XG Firewall and the web server.
Add Web Server
This page describes how to add a web server.
| Protect | 236
| Protect | 237
1. Go to Protect > Web Server > Web Servers and click Add.
2. Enter the following:
Name
Enter a unique name for the web server.
Description
Enter a description for the web server.
Host
Add or select a host, which can either be of the type IP Address or FQDN Host.
Add IP Host
on page 485
Add a FQDN Host
on page 488
Note: FQDN Host is recommended here because hosts listed with their IP address transmit empty host headers which may lead to problems with some browsers.
Type
Select a server type, that is, whether you want the communication between Sophos XG Firewall and the web server to be encrypted (HTTPS) or plaintext (HTTP).
• Encrypted (HTTPS) - Browser-based access to the web server via HTTPS.
• Plaintext (HTTP) - Browser-based access to the web server via HTTP.
Default: Plaintext (HTTP)
Port
Enter a port number for the web server. By default the standard port of the selected web server type is selected.
Keep alive
Click the toggle switch Keep alive to keep the connection between Sophos XG Firewall and the web server open instead of opening a new connection for every single request.
Note: Some web servers do not support keep alive. If you experience reading errors or timeouts, you may need to disable keep alive for the affected server.
Timeout
Enter a timeout for the Keep alive option.
Acceptable range: 1 to 65535 seconds
Default: 300 seconds
Disable backend connection pooling
Click the toggle switch Disable backend connection pooling to create a new connection to the backend server every time it is used, instead of reusing an old connection from the connection pool.
This option is disabled by default. Only use it only if you face connection problems because this may decrease system performance.
