v18 - WAF Patterns are not used anymore? How can the WAF patterns update?

I bet it's part of the IPS bundle now.

I hope that is not the case as I am a big fan of modsecurity (WAF). Granted its a little hard to configure on the front end than a simple proxy while augmenting it with IPS but I find the reliability of modsecurity far greater than ANY IPS engine which WILL drop packets under heavy load.

Regards

Bill

As far as i know, the IPS pattern only covers now the WAF Pattern. It is simply merged together. 

Billybob said:

I hope that is not the case as I am a big fan of modsecurity (WAF). Granted its a little hard to configure on the front end than a simple proxy while augmenting it with IPS but I find the reliability of modsecurity far greater than ANY IPS engine which WILL drop packets under heavy load.

Regards

Bill

 

You misunderstand; I meant that the pattern files with WAF are in the same bundle for updates -- not that the WAF engine is gone, etc.  Based on what Lucar says here I think that is the case, they just changed how they bundle the pattern updates.

Billybob said:

I hope that is not the case as I am a big fan of modsecurity (WAF). Granted its a little hard to configure on the front end than a simple proxy while augmenting it with IPS but I find the reliability of modsecurity far greater than ANY IPS engine which WILL drop packets under heavy load.

Regards

Bill

 

You misunderstand; I meant that the pattern files with WAF are in the same bundle for updates -- not that the WAF engine is gone, etc.  Based on what Lucar says here I think that is the case, they just changed how they bundle the pattern updates.