Multiple External Host Names, Share the same Port HTTPS

[allan_mcclure]

Hello,

This is something we have been trying for some time, we have a client who has a Microsoft TMG server we wish to decommision and move them to a fortigate 90d.

Currently we use a wild card cert, that when you type in mail.blah or rdp.blah the tmg server redirects you to the correct internal web server. This works quite well but for the life of me does anyone know how to complete a simalar procedure on one of the devices would make it much easier for my change over?

Thoughts?

[rpedrica]

Hi Allan,

The TMG has some features that span across the FG and FWB. The FG has no concept of routing based on host headers so you will not be able to do this with an FG alone. The FG can only forward a port once per interface/IP.

FWB does however have the feature you're looking for as it's a full featured WAF and load-balancer. But that's an extra appliance/VM requirement.

Regards