Trying to protect an intranet website

[tkrakowiak]

Hi there,
I’m trying to protect an intranet website that is only accessible via IP but having trouble configuring DNG portal. What I’m expecting is to navigate to http://192.168.0.1 and be prompted for SSO authentication. Any tips or advises?
Many thanks
Tomasz

[DuoPablo]

Hi @tkrakowiak ,

DNS is the backbone of the Duo Network Gateway. If you navigate to http://192.168.0.1 then you will be routed to the website directly. DNG is invoked when you navigate to the specified external URL of the website that is configured to point to DNG’s hostname/IP address. Even though the website may only be accessible via IP internally, DNG requires an external hostname to know how to route the client to said website.

For instance, if I wanted to access the website at http://192.168.0.1, I would first navigate to https://app.example.com (which is a public CNAME for my DNG server, dng.example.com), then DNG would route the client to the configured internal URL of http://192.168.0.1 after authentication. The DNG Admin settings for this Web Application would look similar to:

How do I prevent internal users from bypassing Duo Network Gateway for my web applications?

Hope this helps!