Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 8 replies
  • Subscribers 38 subscribers
  • Views 2663 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

WAF Synology No Protection

Regex

Hi, I did manage to config WAF for Synology Sync drive. But i dont have any protection. While im uploading testing file "Eicar" it gets passthru...

Why i dont have AV, logs  and other options  turned on.

Thx.

#xg #synology #WAF #"web protection" #XG #SSL#nostandardport

Sophos XG v18 mr4



This thread was automatically locked due to age.
Parents
  • FormerMember
    0 FormerMember

    Hi Roman, Thanks for reaching out.

    You can use WAF to protect the access portal (web GUI) of your Synology device as long as it's behind XG and on top of that, you can also put an IPS policy in the WAF rule which can help you scan the rest of the traffic as well.

    I have tried this with a FreeNAS custom device I have in my LAN and works like a charm! :) 

  • 0 in reply to FormerMember

    I'm using WAF - it's working, I mean in some way. I did import certs cuz service is on https port. But scanning desont  block any malicious content like viruses etc. I'm using IPS it that policy, you can see it onpasted screenshots. The point is that ips doesn't block https traffic. I guess that if I have put cert for specific scenario then traffic should be decrypted by WAF rule ? So if I'm uploading some malicious files  - sophos  should drop it. ;)

    Thx for answer ;)

    __________SETUP___________

    HP Small Form Factor:  i5 4Cores, 8Gb of RAM.
    Intel Network Card 5x Eth
    SSD: 256Gb

Reply
  • 0 in reply to FormerMember

    I'm using WAF - it's working, I mean in some way. I did import certs cuz service is on https port. But scanning desont  block any malicious content like viruses etc. I'm using IPS it that policy, you can see it onpasted screenshots. The point is that ips doesn't block https traffic. I guess that if I have put cert for specific scenario then traffic should be decrypted by WAF rule ? So if I'm uploading some malicious files  - sophos  should drop it. ;)

    Thx for answer ;)

    __________SETUP___________

    HP Small Form Factor:  i5 4Cores, 8Gb of RAM.
    Intel Network Card 5x Eth
    SSD: 256Gb

Children
No Data
Unfiltered HTML