A customer is using a NetScreen-25 firewall. By default it has a web interface on port 80 and 443. I've changed the port for the HTTPS web interface to some other number that is not being used and disabled the checkbox that normally enabled the HTTPS web interface.
I've then added a policy to forward incoming tcp requests on port 443 to 192.168.2.2:443 like I would add any other NAPT policy. However the policy is never hit (even though it's at the top of the list) so data never gets forwarded to the internal server.
We want to expose the internal site via HTTPS to the internet (without the user having to specify a port other than 443 of course).
Has anybody got an idea what might be wrong? Might this be a bug in the device given that it normally reserves 443 for it's web interface even when you change the port and disable it?