# PYDIO Cells behind a FIREWALL and NAT how to? **URL:** \ **Category:** Pydio Cells\ **Created:** [February 11, 2019, 2:10pm UTC](https://forum.pydio.com/t/pydio-cells-behind-a-firewall-and-nat-how-to/2135 "2019-02-11T14:10:32Z")\ **Posts on this page:** 7\ **Page:** 1
**Author:** ![Stef](https://yyz2.discourse-cdn.com/flex032/user_avatar/forum.pydio.com/stef/32/694_2.png) [@Stef](https://forum.pydio.com/u/Stef)\ **Post date:** [February 11, 2019, 2:10pm UTC](https://forum.pydio.com/t/pydio-cells-behind-a-firewall-and-nat-how-to/2135/1 "2019-02-11T14:10:33Z")
Hi, i try for a moment to have Pydio cells running behind a Palo Alto firewall having NAT’s. Look’s like it sucks … what are recommendations you should suggest ? As i have tried a ton of different configuration(install) and no success ? may i have to install a reverse proxy for to have things going on ? Thanks for help if you have already succeeded in this configuration. Regards, Stef ---
**Author:** ![zayn](https://avatars.discourse-cdn.com/v4/letter/z/a87d85/32.png) [@zayn](https://forum.pydio.com/u/zayn)\ **Post date:** [February 11, 2019, 2:39pm UTC](https://forum.pydio.com/t/pydio-cells-behind-a-firewall-and-nat-how-to/2135/2 "2019-02-11T14:39:31Z")
Hi, i don’t have much experience with firewalls but it should be working if you are on linux for instance with `ufw` as long as you create the rule that allows access to your cells port (the one used on the bind & external address). ---
**Author:** ![Stef](https://yyz2.discourse-cdn.com/flex032/user_avatar/forum.pydio.com/stef/32/694_2.png) [@Stef](https://forum.pydio.com/u/Stef)\ **Post date:** [February 11, 2019, 3:08pm UTC](https://forum.pydio.com/t/pydio-cells-behind-a-firewall-and-nat-how-to/2135/3 "2019-02-11T15:08:04Z")
Hi Zayn, currently discussing with the PALO ALTO NETSEC department, look’s like the pydio cells (the NATED address) tries to access the public address for cookies auth/token What is not usual … we are on the tests to solve that. ![](https://canada1.discourse-cdn.com/flex032/uploads/pydio/original/1X/f2be4c83bad641555f77ad05e83e4b3be3a17035.png) ---
**Author:** ![falk.john](https://avatars.discourse-cdn.com/v4/letter/f/45deac/32.png) [@falk.john](https://forum.pydio.com/u/falk.john)\ **Post date:** [February 11, 2019, 3:21pm UTC](https://forum.pydio.com/t/pydio-cells-behind-a-firewall-and-nat-how-to/2135/4 "2019-02-11T15:21:48Z")
Hi Stef, just being curious, how do you access (and have configured) cells - by IP or by a DNS name ? Using the IP will cause issues (as may content inspection on the firewall) as you will come with the wrong Host header when NAT is active. Also secure cookies can not be used as these are bound to the cells IP. Regards, Falk ---
**Author:** ![Stef](https://yyz2.discourse-cdn.com/flex032/user_avatar/forum.pydio.com/stef/32/694_2.png) [@Stef](https://forum.pydio.com/u/Stef)\ **Post date:** [February 11, 2019, 3:48pm UTC](https://forum.pydio.com/t/pydio-cells-behind-a-firewall-and-nat-how-to/2135/5 "2019-02-11T15:48:23Z")
Hi Falk, thanks for your attention. I did a ton of tests, in this late case - i’m using just the public address with ./cells install process and bind internal/external addresses as public address - have tested with DNS entries too, DNS is imho a secondary option before starting production as i will go to a signed ssl certificate to access the site later — It is at the moment over tests, no reason a fqdn need to be necessary imho. ![](https://canada1.discourse-cdn.com/flex032/uploads/pydio/original/1X/f2be4c83bad641555f77ad05e83e4b3be3a17035.png) ---
**Author:** ![IIS\_Team\_FMS](https://avatars.discourse-cdn.com/v4/letter/i/77aa72/32.png) [@IIS\_Team\_FMS](https://forum.pydio.com/u/IIS_Team_FMS)\ **Post date:** [March 7, 2019, 8:19am UTC](https://forum.pydio.com/t/pydio-cells-behind-a-firewall-and-nat-how-to/2135/6 "2019-03-07T08:19:44Z")
Hi Stef, I encounter error when placing cells behind firewall NAT. After narrow down that the NAT need to enable port reflection, the error was gone but my login just got timed out waiting for authentication. Hope you have better luck. Regards. ---
**Author:** ![Stef](https://yyz2.discourse-cdn.com/flex032/user_avatar/forum.pydio.com/stef/32/694_2.png) [@Stef](https://forum.pydio.com/u/Stef)\ **Post date:** [March 7, 2019, 12:25pm UTC](https://forum.pydio.com/t/pydio-cells-behind-a-firewall-and-nat-how-to/2135/7 "2019-03-07T12:25:51Z")
Hi IIS, I’m ok now - just i have still problem with collabora and SSL running over docker with ssl option … If somebody know how to or have had succes;-) I will be happy as I have spent lost a lot time trying to make cells running. I was not able to have cells going on using http because the PA firewall blocked websockets at the application level, I then decided to use SSL and looks good now. i have used both the INTERNAL and EXTERNAL\_URL with FQDN + i have added in /etc/hosts FQDN -\> internal IP address as the server name differed. Hope this help - not really easy to configure the Pydio Cells i feel … Regards.