This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

is WAF is supported in bridge mode ?

Hi All,

Need you all expertise on this.

We have facing this issue for the past two weeks, our WAF seems not worked as it should.
Our WAF logs show nothing, even when i try to attack with some small SQL injection script or XSS [:S].

I'm running Astaro UTM ASG Software firmware version 9.105-9.
Our current setup is
Internet Cisco Asa Sophos UTM Internal,
internal and Sophos UTM share the same gateway.

My question, is WAF is supported in bridge mode ?

Thanks in advance

Regards,
Agung

This thread was automatically locked due to age.

Parents

0 BAlfson over 11 years ago

Yes, you have to have additional addresses on the UTM interface.

I agree that it appears that you can use a single interface.

Cheers - Bob

Sorry for any short responses. Posted from my iPhone.

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
0 agungw over 11 years ago in reply to BAlfson

Hi Bob,

Glad you come to my thread.
Been searching for your rules in this forum before i posted, but cannot found it [:(].

Well, based on some answer here, it seems i need to change my topology to get WAF works as it should.

1. WAF doesn't work in bridge/transparent mode
2. Need to add alias IP Address for Web Server in UTM -> NAT ?
i think it will get the UTM to act as a reverse proxy ?
3. Setup the UTM in single NIC mode
4. NAT the http traffic from Cisco ASA to the UTM

Can somebody please verify my conclusion as above ?

Thank you
Agung
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 agungw over 11 years ago in reply to BAlfson

Hi Bob,

Glad you come to my thread.
Been searching for your rules in this forum before i posted, but cannot found it [:(].

Well, based on some answer here, it seems i need to change my topology to get WAF works as it should.

1. WAF doesn't work in bridge/transparent mode
2. Need to add alias IP Address for Web Server in UTM -> NAT ?
i think it will get the UTM to act as a reverse proxy ?
3. Setup the UTM in single NIC mode
4. NAT the http traffic from Cisco ASA to the UTM

Can somebody please verify my conclusion as above ?

Thank you
Agung
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data

is WAF is supported in bridge mode ?

Submitted a Tech Support Case lately from the Support Portal?