You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
-`caCertificateRefs` - supports single reference to a `ConfigMap`, with the CA certificate in a key named `ca.crt`.
353
-
-`name`- supported.
354
-
-`group` - supported.
355
-
-`kind` - supports `ConfigMap`.
356
-
-`hostname` - supported.
357
-
-`wellKnownCertificates` - supports `System`. This will set the CA certificate to the Alpine system root CA path `/etc/ssl/cert.pem`. NB: This option will only work if the NGINX image used is Alpine based. The NGF NGINX images are Alpine based by default.
354
+
-`caCertificateRefs`: Supports single reference to a `ConfigMap`, with the CA certificate in a key named `ca.crt`.
355
+
-`name`: Supported.
356
+
-`group`: Supported.
357
+
-`kind`: Supports `ConfigMap`.
358
+
-`hostname`: Supported.
359
+
-`wellKnownCertificates`: Supports `System`. This will set the CA certificate to the Alpine system root CA path `/etc/ssl/cert.pem`. NB: This option will only work if the NGINX image used is Alpine based. The NGF NGINX images are Alpine based by default.
Copy file name to clipboardExpand all lines: content/nim/nginx-app-protect/setup-waf-config-management.md
+13-13Lines changed: 13 additions & 13 deletions
Original file line number
Diff line number
Diff line change
@@ -1,5 +1,5 @@
1
1
---
2
-
description: Learn how to use F5 NGINX Management Suite Instance Manager to secure your
2
+
description: Learn how to use F5 NGINX Instance Manager to secure your
3
3
applications with NGINX App Protect WAF security policies.
4
4
docs: DOCS-996
5
5
doctypes:
@@ -23,7 +23,7 @@ Complete the following prerequisites before proceeding with this guide.
23
23
24
24
- You have one or more instances of [NGINX App Protect WAF](https://docs.nginx.com/nginx-app-protect/admin-guide/install/) installed and running. See [Support for NGINX App Protect WAF]({{< relref "tech-specs#support-for-nginx-app-protect-waf" >}}) for a list of supported versions.
25
25
26
-
{{<note>}}If you are using configuration management and the NGINX Management Suite Security Monitoring module, follow the instructions in the [setup guide]({{<relref "/nim/nginx-app-protect/security-monitoring/set-up-app-protect-instances" >}}) to set up your NGINX App Protect instances before proceeding with this guide.{{</note>}}
26
+
{{<note>}}If you are using configuration management and the NGINX Instance Manager Security Monitoring, follow the instructions in the [setup guide]({{<relref "/nim/nginx-app-protect/security-monitoring/set-up-app-protect-instances" >}}) to set up your NGINX App Protect instances before proceeding with this guide.{{</note>}}
27
27
28
28
- You have Instance Manager v2.6.0 or later [installed]({{< relref "/nim/deploy/vm-bare-metal/_index.md" >}}), licensed, and running.
29
29
If you have a subscription to NGINX App Protect WAF, you can find your Instance Manager license in the subscription details section of [MyF5](https://my.f5.com).
@@ -42,7 +42,7 @@ Instance Manager does not support the following NGINX App Protect features:
42
42
43
43
## Install the WAF Compiler
44
44
45
-
Instance Manager can use the NGINX App Protect WAF compiler to "pre-compile" security configurations before syncing them to managed data plane instances. You'll need to install the WAF compiler package on the NGINX Management Suite host to enable this functionality. If you'll be continuing with WAF compilation on the data plane host, installing the WAF compiler on the NGINX Management Suite host is not necessary.
45
+
Instance Manager can use the NGINX App Protect WAF compiler to "pre-compile" security configurations before syncing them to managed data plane instances. You'll need to install the WAF compiler package on the NGINX Instance Manager host to enable this functionality. If you'll be continuing with WAF compilation on the data plane host, installing the WAF compiler on the NGINX Instance Manager host is not necessary.
46
46
47
47
Be sure to download and install the correct WAF compiler version for your environment:
48
48
@@ -167,7 +167,7 @@ Take the steps below to download the WAF compiler, Attack Signatures, and Threa
[Threat Campaigns](https://docs.nginx.com/nginx-app-protect/configuration-guide/configuration/#threat-campaigns) is a threat intelligence feature included in an NGINX App Protect WAF subscription. The feature includes frequent update feeds containing contextual information about active attack campaigns currently being observed by F5 Threat Labs that NGINX App Protect WAF can provide protection against. Just like Attack Signatures, the Threat Campaign patterns are updated regularly. Unlike Attack Signatures, the NGINX App Protect WAF installation does not include any Threat Campaigns and you need to install them in order for the protection to take effect. Due to the highly dynamic nature of those campaigns the updates are issued far more frequently than the Attack Signatures. You need to install those updates close to the time they are issued in order to get the most effective protection.
222
222
223
-
In order to take advantage of new Attack Signature and Threat Campaign packages, you need to upload these packages to NGINX Management Suite.
223
+
In order to take advantage of new Attack Signature and Threat Campaign packages, you need to upload these packages to NGINX Instance Manager.
224
224
225
225
You can either configure Instance Manager to download new versions automatically, or manage the files manually by downloading the packages from MyF5 and then uploading them to Instance Manager by using the REST API.
226
226
@@ -462,7 +462,7 @@ To onboard your NGINX App Protect WAF instances to Instance Manager, you need to
462
462
463
463
1. Use SSH to connect to the NGINX App Protect WAF instance. Take the steps below for each instance to download and install NGINX Agent from the management plane host.
464
464
465
-
1. Download the NGINX Agent package from the NGINX Management Suite host and run the agent install script.
465
+
1. Download the NGINX Agent package from the NGINX Instance Manager host and run the agent install script.
466
466
467
467
{{< tip >}}You can add instances with the same version of NGINX App Protect installed to an instance group by running the agent install command on each instance with the optional `--instance-group`` flag.{{< /tip>}}
468
468
{{< include "agent/installation/install-agent-api.md" >}}
{{< note >}}If you're using the NGINX Management Suite Security Monitoring module, you should already have the `app_protect_security_log` directive set to reference the `secops_dashboard.tgz` file as shown below. Do not change this setting.
921
+
{{< note >}}If you're using the NGINX Instance Manager Security Monitoring, you should already have the `app_protect_security_log` directive set to reference the `secops_dashboard.tgz` file as shown below. Do not change this setting.
@@ -1056,11 +1056,11 @@ Once you have added the NGINX App Protect WAF directives to your NGINX configura
1056
1056
If you're having issues with NGINX App Protect WAF, we suggest trying the following troubleshooting steps. If none of them helps, please reach out to NGINX Customer Support for further assistance.
1057
1057
1058
1058
<details>
1059
-
<summary>Verify that NGINX App Protect WAF is not installed on the NGINX Management Suite host</summary>
1059
+
<summary>Verify that NGINX App Protect WAF is not installed on the NGINX Instance Manager host</summary>
1060
1060
1061
-
To ensure no library conflicts arise when installing `nms-nap-compiler`, verify that NGINX App Protect WAF is not installed on the NGINX Management Suite host. You can do this by taking the following steps:
1061
+
To ensure no library conflicts arise when installing `nms-nap-compiler`, verify that NGINX App Protect WAF is not installed on the NGINX Instance Manager host. You can do this by taking the following steps:
1062
1062
1063
-
1. Open an SSH connection to your NGINX Management Suite host and log in.
1063
+
1. Open an SSH connection to your NGINX Instance Manager host and log in.
1064
1064
2. Run the following command:
1065
1065
1066
1066
- Debian-based distributions, run `dpkg -s app-protect`
@@ -1077,7 +1077,7 @@ Each NGINX App Protect WAF version has a corresponding version of the WAF compil
1077
1077
1078
1078
To view the installed version of the WAF compiler:
1079
1079
1080
-
1. Open an SSH connection to your NGINX Management Suite host and log in.
1080
+
1. Open an SSH connection to your NGINX Instance Manager host and log in.
1081
1081
2. Run the following command:
1082
1082
1083
1083
```shell
@@ -1139,7 +1139,7 @@ extensions:
1139
1139
nginx_app_protect:
1140
1140
# Report interval for NGINX App Protect details - the frequency the NGINX Agent checks NGINX App Protect for changes.
1141
1141
report_interval: 15s
1142
-
# Enable precompiled publication from the NGINX Management Suite (true) or perform compilation on the data plane host (false).
1142
+
# Enable precompiled publication from the NGINX Instance Manager (true) or perform compilation on the data plane host (false).
0 commit comments