Deployed WAF in sophos UTM as a reverse proxy for confluence

[dormudi]

I deployed Web Application Firewall (webserver protection) as referenced in sophos UTM so the external users can connect via https using the virtual web server as a front-end to confluence.  Confluence is still operation on default http on port 8090 for users in the local LAN.  Problem is that users connected https via WAF cannot create new pages or edit anything.  Also the team calendars for them do not display.  Trying to create a page they get "took long for connection...." message.  Version of Confluence is 6.0.2.  Any idea how to fix this?  I have played and changed various protection profiles in WAF but no luck.

[dormudi]

Thanks for the answer!  I am still looking at the issue.  What I found out is that disabling "Collaborating editor" in confluence fixes all my issues with WAF.  Now I can create new pages and edit via https externally.  I do not believe that this is the fix though. 

[Nic Brough -Adaptavist-]

No, you're right, it's not a solution, because the collaborative editing is very useful.

I'd run through https://confluence.atlassian.com/doc/troubleshooting-collaborative-editing-858772087.html as well by the way.  Sorry I didn't mention that earlier, but it does run through networking issues which might tell you where your WAF is misconfigured.

[Nic Brough -Adaptavist-]

Ok, if Confluence is working when connected directly in the local LAN, and not from the outside, then it's definitely a problem with your virtual server and/or firewall set up.  If part of it is getting through, then it suggests that the connection back to Confluence is probably (but not definitely) configured ok, and it's the server and firewall setup that is incorrect.

There's no way to just solve this.  I would start with a look at the Confluence application logs (confluence-home/logs), but with connection time outs, I suspect most of the errors will be being caused and hence logged by the firewall and/or virtual host.  So you'll want to read the logs for them.