Difference between revisions of "ASL WAF"

From Atomicorp Wiki
Jump to: navigation, search
(Created page with "= Introduction = = Configuration = The ASL WAF is initially configured during the install of ASL. Once ASL is installed, you can configure the WAF through three parts of th...")

Revision as of 14:57, 16 June 2012

Contents

Introduction

Configuration

The ASL WAF is initially configured during the install of ASL.

Once ASL is installed, you can configure the WAF through three parts of the ASL GUI:

WAF Tab

This tab is used to setup the WAF. There are three types of WAF you can configure:

embedded

The embedded WAF is an apache module that is installed on any local Apache installations. This should be setup by default, if you are running apache on the system.

local

This type of WAF is used to protect any local HTTP and/or HTTPS services that may be running on the system itself, where the embedded WAF module can not be used. For example, if the system was running a tomcat or litespeed, which do not support the WAF embedded WAF module. You can configure a WAF to protect these services.

To setup a local WAF simply


remote

This type of WAF is used to protect any remote HTTP and/or HTTPS services that are not running on the system itself. For example, if you have a remote webserver you wish to protect, you can configure a WAF to protect these services.


To setup a remote WAF simply

ASL Configuration Settings

Rule Manager

The Rule manager can be used to configure individual WAF rules, such as what response the system such take for that rule, if an email or GUI alert should be presented, and so on. The following are the options you can use for each rule:


Usage

Events

Personal tools