Does the Sophos UTM use commercial ModSecurity rules like Trustwave SpiderLabs, Atomicorp, or other? Or are they custom created by Sophos?
Neither. UTM uses free base set from owasp. The costing for commercial sets makes them unuseable with the Sophos licensing model and Sophos does not create their own custom rules, they only disable some individual rules that are known to cause issues.
__________________ ACE v8/SCA v9.3
...still have a v5 install disk in a box somewhere.
