Imperva Cyber Community

communities_1.jpg
 View Only

  • 1.  Onboarding Applications using reverse proxy

    Posted 10-23-2023 13:02

    Hello,

    I'm seeking assistance with setting up a WAF Virtual Gateway in reverse proxy mode. While I understand that the setup is similar to a DAM, I'm encountering challenges when onboarding applications. One aspect that I'm finding confusing is the setup of aliases on the gateway. Do I need to use a random IP from my network for the inbound and outbound configuration, or should I be using the management IP of the gateway? Additionally, I'm tasked with onboarding a large amount of applications. Do I need to create an alias for each application I want to onboard?

    I'm looking for help in understanding the specifics of reverse proxy mode. I'd greatly appreciate prompt and helpful responses. Thank you all.


    #On-PremisesWAF(formerlySecuresphere)

    ------------------------------
    Chinatu Azubuike
    Cybersecurity Analyst
    Platview Technologies Ltd
    Lagos
    ------------------------------


  • 2.  RE: Onboarding Applications using reverse proxy

    Posted 10-24-2023 00:18

    Hi Chinatu,

    I appreciate you reaching out to us on the IMperva forum. Let's keep it short and simple. Here are the answers you're looking for:

    Deployment Type: KRP/NGRP

    Q1: Inbound and Outbound Configuration IP

    • Use a separate subnet configuration for a separate gateway interface.
    • If you're going for one-arm mode, you can use the management gateway subnet too.

    Q2: Onboarding Multiple Applications

    • Yes, you'll need a separate alias for each application.

    For more in-depth information, check out these articles:

    Hope this helps! Feel free to ask if you need anything else.



    ------------------------------
    Nikhil Nandode
    ------------------------------



  • 3.  RE: Onboarding Applications using reverse proxy

    Posted 10-25-2023 03:09

    Thank you very much for help Nikhil.



    ------------------------------
    Chinatu Azubuike
    Cybersecurity Analyst
    Platview Technologies Ltd
    Lagos
    ------------------------------

    Original Message