Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 5 replies
  • Subscribers 29 subscribers
  • Views 4152 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

What about WAF?

DouglasFoster

Does XG have WAF caoability?   If so, how does it compare to UTM?   If not, what are you using in place of UTM WAF?



This thread was automatically locked due to age.
Parents
  • 0

    Only thing I can say is ... wait.  WAF on XG will manage very basic HTTPS hosting (HTTPS Port Forwarding).  You cannot do what everyone understand as "Port Forwarding" easily on XG.  XG is not there yet.  Two years from now.  Not before v20.

    Unless ... 

    1. You really are familiar deeply with Linux and CLI.  Particularly CLI at networking.  XG is just an interface to a collection of Linux & Open Source netwotk utilities.  You can consequently do more with CLI.  You need CLI to view logs, because the log viewer in XG just do not do it.  
    2. You have months of available time to work on this.  You may be familiar with those Open Source utilities:  www.strongswan.com (VPN), https://www.exim.org/ (MTA), ET.c.  In such a case go ahead.
    3. You have plan B, C and D.  Like two complete firewalls sets, so that if one thing just don't work, you can bring back the old firewall kits while waiting for fixes.
    4. Your set-up is particularly simple.

    Or maybe you are simply very adventurous.

    Paul Jr 

Reply
  • 0

    Only thing I can say is ... wait.  WAF on XG will manage very basic HTTPS hosting (HTTPS Port Forwarding).  You cannot do what everyone understand as "Port Forwarding" easily on XG.  XG is not there yet.  Two years from now.  Not before v20.

    Unless ... 

    1. You really are familiar deeply with Linux and CLI.  Particularly CLI at networking.  XG is just an interface to a collection of Linux & Open Source netwotk utilities.  You can consequently do more with CLI.  You need CLI to view logs, because the log viewer in XG just do not do it.  
    2. You have months of available time to work on this.  You may be familiar with those Open Source utilities:  www.strongswan.com (VPN), https://www.exim.org/ (MTA), ET.c.  In such a case go ahead.
    3. You have plan B, C and D.  Like two complete firewalls sets, so that if one thing just don't work, you can bring back the old firewall kits while waiting for fixes.
    4. Your set-up is particularly simple.

    Or maybe you are simply very adventurous.

    Paul Jr 

Children