CPUG: The Check Point User Group

Resources for the Check Point Community, by the Check Point Community.


** Announcing the #CPUGchallenge **

I'm very happy to announce that CPUG will be hosting "The CPUG Challenge" during CPX this year.
It promises to be a fun and interesting event that will test (and maybe even expand) your knowledge of Check Point.
Whether or not you plan to attend CPX, we have something for you. Please check out this post or the CPUGchallenge.com web site for more information. -E

 

Results 1 to 4 of 4

Thread: Host Header Redirection

  1. #1
    Join Date
    2009-08-17
    Posts
    42
    Rep Power
    0

    Default Host Header Redirection

    Hi,

    is it possible to confige the Checkpoint Firewall to redirect Host Header entrys to different webservers?

    for example: We only have one externel IP address 65.65.65.65 and want to Redirect www.example1.com to webserver 192.168.1.1 and www.example2.com to webserver 192.168.1.2?

    4607 - Security Gateway Appliance

    regards,
    Dende

  2. #2
    Join Date
    2014-09-23
    Location
    Austin, TX
    Posts
    134
    Rep Power
    3

    Default Re: Host Header Redirection

    Most web servers should be able to distinguish sites based on URL headers. This is something that should be done by the web server function and not the firewall. The firewall sees the traffic coming in on the external interface as the same socket IP:dport. So you shouldnt have to change anything with its configuration. DNS should be ok too:

    www.example1.com 65.65.65.65
    www.example2.com 65.65.65.65


    Otherwise, if you dont have any more public IP addresses, you've got two choices: Either have more virtual hosts per physical server, or request a larger public address allocation.

  3. #3
    Join Date
    2013-02-13
    Posts
    31
    Rep Power
    0

    Default Re: Host Header Redirection

    This should not be the job of the firewall. A load-balancer can does this pretty easily.

  4. #4
    Join Date
    2006-04-27
    Location
    Twillight zone
    Posts
    958
    Rep Power
    11

    Default Re: Host Header Redirection

    It has been more than 15 years since i touched URI resources in CP, but yes it could be done IIRC. But its a bad bad legacy feature, so just don't go that way and listen to the gentlemen that responded before me.

Similar Threads

  1. Host Redirection
    By lbirch in forum Intermediate
    Replies: 1
    Last Post: 2012-03-19, 15:59
  2. Port Redirection
    By lbirch in forum Beginner
    Replies: 1
    Last Post: 2012-03-12, 08:33
  3. H.323 Illegal redirection
    By Wonzling in forum Voice over IP Blade (VoIP)
    Replies: 16
    Last Post: 2009-10-16, 15:46
  4. Traffic Redirection
    By crono_79 in forum NAT (Network Address Translation)
    Replies: 0
    Last Post: 2006-04-18, 13:08
  5. How to transfer policy from one host to his spare host ?
    By SplatFan in forum Installing And Upgrading
    Replies: 1
    Last Post: 2006-03-03, 07:18

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •