Is it possible to make custom WAF Configurations on Sophos XG ?

Question

Hello everyone, 
 Is it possible to create custom WAF configurations without It being overwritten every time you edit or create a new WAF Policy ? 
 I need to add both "AllowEncodedSlashes NoDecode", and "nocanon" at a certain WAF Policy. 
 Thanks!

jamesharper · Accepted Answer

I raised a ticket for this, as have a few others before me. The answer I got was that there isn't a way to do this, and Sophos's current position is that "this is not a bug but a feature request" and "If AllowEncodedSlashes are enabled and the URL contains an encoded slash, mod_proxy would break it. Unfortunately changing this behavior would cause security issues by allowing raw URLs passed through the WAF.". 
 You can vote for the "feature request" at https://ideas.sophos.com/forums/330219-xg-firewall/suggestions/17335588-reverse-proxy-add-encodedslashes-option 
 James

LuCar Toni · Answer

You could look into ZTNA for the feature, to build a new approach to such implementation for the future. 
 https://partnernews.sophos.com/en-us/2020/12/products/sophos-zero-trust-network-access-ztna-is-coming-soon-your-faq/

Is it possible to make custom WAF Configurations on Sophos XG ?

Top Replies