Quantcast
Channel: SRX Services Gateway topics
Viewing all articles
Browse latest Browse all 3959

Enabling web authentication allows J-web access

$
0
0

We use the web-authentication portal for vendors to log in. After log in the vendor can access internal systems as defined by our security policies and destination NAT rules. This works flawlessly except for one detail.

 

webauth.example.com resolves to a.b.c.d(below).


Going to https://webauth.example.com/ takes one to the Firewall User Web-Authentication Login page.

 

But, if one goes to https://webauth.example.com/asdfa (or any other random letters) the J-Web login is presented.

 

Is it possible to use web-authentication without exposing J-web on the same interface?

 

We have an SRX-300 running 18.2R3.4.

# show system services web-management 
management-url admin;
https {
    pki-local-certificate webauth-cert;
    interface [ ge-0/0/0.0 ge-0/0/1.0 ge-0/0/5.0 ];
}
session {
    idle-timeout 60;
}

# show interfaces ge-0/0/5 unit 0 family inet address a.b.c.d/28    
web-authentication https;

# show security zones security-zone Internet 
screen untrust-screen;
interfaces {
    ge-0/0/5.0 {
        host-inbound-traffic {
            system-services {
                ping;
                https;
                ike;
            }
        }
    }
}

 


Viewing all articles
Browse latest Browse all 3959

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>