Join the Conversation

To sign in, use your existing MySonicWall account. To create a free MySonicWall account click "Register".


Two web servers on TZ-300

We are a small office with TZ-300, one public IP and two web servers which need to be accessed from the internet: and

From this SonicWall article (, at section “Inbound Port Address Translation via WAN (X1) IP Address”, I found how to access both servers but it requires the user to access and which is not suitable to our case.

I would like to know if our desired architecture work with TZ-300, and instructions.


Category: Entry Level Firewalls

Best Answers

  • Options
    BWCBWC Cybersecurity Overlord ✭✭✭
    Answer ✓

    Hi @fre

    with just one public IP address you cannot "share" port 443, because NAT does not work SNI based. I would suggest just install a reverse proxy (NGiNX would be my weapon of choice) in the DMZ and let it do the HTTPS offloading and forwarding requests based on the requested to app or dev. Sorry that there needs to be another system involved, but I see no other option.


  • Options
    frefre Newbie ✭
    Answer ✓

    Solution for this case: firewall forwarding to a NGINX server, and this proxy to our internal servers


Sign In or Register to comment.