Web Application Firewall

The web application firewall allows reverse proxy instances to protect against web application attacks using a rules based engine.

Overview
The reverse proxy contains a web application firewall capability which is based on the ModSecurity rules engine.
Configuration steps
To use the web application firewall, configure the web application firewall and the web application firewall rules.
Working with rules
Web application firewall rules are authored as ModSecurity rules. This page provides a brief introduction to how rules are constructed and how new rules can be added to the environment.
Logging and auditing
Various levels of logging and auditing can be enabled in the ModSecurity engine.
Limitations
To help protect the integrity of the Verify Identity Access appliance, certain ModSecurity capabilities are not available.

Parent topic: Web Reverse Proxy configuration