I've got a Moodle installed on IIS. Working via DNAT works fine but as soon as I implement WAF, it breaks all the CSS. Anyone have any thoughts on why this might be?
WAF needs to be tuned to your specific site. False positives are being triggered. Check the log to get the Rule IDs being triggered, then add those to the Skip Filter Rules List.
__________________ ACE v8/SCA v9.3
...still have a v5 install disk in a box somewhere.
I've got a feeling this is something to do with http to https redirection but I can't work out quite what's going on. There's a setting within Moodle to redirect to https at login. I'm guessing this may be the issue? - i'll report back after some more troubleshooting.
I have the same problem. I think it's due to the fact that I enabled HTTPS for the login in moodle. So whenever you go to the site, moodle redirects to https for the login and back to http after login.
I have tried configuring the Sophos to only publish the server (without any WAF profile) and it doesn't work, it seems it skips CSS. Logs don't show any rules being applied, which is normal since i'm not applying any profile.
Anyone know how to solve this?
Thank you in advanced!