In the new version, under "Pattern Updates" the WAF is not in the list anymore. Can you describe how the WAF patterns are updated?
Thanks
In the new version, under "Pattern Updates" the WAF is not in the list anymore. Can you describe how the WAF patterns are updated?
Thanks
I bet it's part of the IPS bundle now.
I hope that is not the case as I am a big fan of modsecurity (WAF). Granted its a little hard to configure on the front end than a simple proxy while augmenting it with IPS but I find the reliability of modsecurity far greater than ANY IPS engine which WILL drop packets under heavy load.
Regards
Bill
As far as i know, the IPS pattern only covers now the WAF Pattern. It is simply merged together.
Billybob said:I hope that is not the case as I am a big fan of modsecurity (WAF). Granted its a little hard to configure on the front end than a simple proxy while augmenting it with IPS but I find the reliability of modsecurity far greater than ANY IPS engine which WILL drop packets under heavy load.
Regards
Bill
You misunderstand; I meant that the pattern files with WAF are in the same bundle for updates -- not that the WAF engine is gone, etc. Based on what Lucar says here I think that is the case, they just changed how they bundle the pattern updates.
Billybob said:I hope that is not the case as I am a big fan of modsecurity (WAF). Granted its a little hard to configure on the front end than a simple proxy while augmenting it with IPS but I find the reliability of modsecurity far greater than ANY IPS engine which WILL drop packets under heavy load.
Regards
Bill
You misunderstand; I meant that the pattern files with WAF are in the same bundle for updates -- not that the WAF engine is gone, etc. Based on what Lucar says here I think that is the case, they just changed how they bundle the pattern updates.