To purchase or add the NGINX ModSecurity WAF to an existing NGINX Plus subscription, contact the NGINX sales team. You can try the NGINX ModSecurity WAF free for 30 days. The NGINX ModSecurity WAF is available to NGINX Plus customers as a downloaded dynamic module at an additional cost.

Using the ModSecurity Rules from Trustwave SpiderLabs with the NGINX ModSecurity WAF.

Using the OWASP CRS with the NGINX ModSecurity WAF.This chapter explains how to install the NGINX ModSecurity WAF, presents a sample configuration of a simple rule, and sets up logging. The NGINX ModSecurity WAF protects web applications against SQL Injection (SQLi), Remote Code Execution (RCE), Local File Include (LFI), cross‑site scripting (XSS), and many other attacks. NGINX Plus Release 12 and later supports the NGINX ModSecurity WAF. The NGINX ModSecurity WAF was previously called the NGINX WAF, and the NGINX Plus with ModSecurity WAF before that. The NGINX ModSecurity WAF is the NGINX Plus build of ModSecurity. This chapter explains how to install the NGINX ModSecurity web application firewall (WAF), configure a simple rule, and set up logging. If you would like to contact your account manager at any time, please reach out to us. NGINX ModSecurity WAF reaches End of Life (EoL) effective March 31, 2024.įor additional information, refer to the End of Life Announcement on the NGINX Blog.

No further renewals will be accepted as of April 1, 2023. F5 NGINX ModSecurity WAF reached End of Sale (EoS) effective April 1, 2022.

Modsecurity