Imperva Cyber Community

Hello,

I'm seeking assistance with setting up a WAF Virtual Gateway in reverse proxy mode. While I understand that the setup is similar to a DAM, I'm encountering challenges when onboarding applications. One aspect that I'm finding confusing is the setup of aliases on the gateway. Do I need to use a random IP from my network for the inbound and outbound configuration, or should I be using the management IP of the gateway? Additionally, I'm tasked with onboarding a large amount of applications. Do I need to create an alias for each application I want to onboard?

I'm looking for help in understanding the specifics of reverse proxy mode. I'd greatly appreciate prompt and helpful responses. Thank you all.

Hi Chinatu,

I appreciate you reaching out to us on the IMperva forum. Let's keep it short and simple. Here are the answers you're looking for:

Deployment Type: KRP/NGRP

Q1: Inbound and Outbound Configuration IP

• Use a separate subnet configuration for a separate gateway interface.
• If you're going for one-arm mode, you can use the management gateway subnet too.

Q2: Onboarding Multiple Applications

• Yes, you'll need a separate alias for each application.

For more in-depth information, check out these articles:

• IMperva v13.6 Administration Guide
• https://docs.imperva.com/bundle/v13.6-web-application-firewall-user-guide/page/3092.htm

Hope this helps! Feel free to ask if you need anything else.

Hello,

I'm seeking assistance with setting up a WAF Virtual Gateway in reverse proxy mode. While I understand that the setup is similar to a DAM, I'm encountering challenges when onboarding applications. One aspect that I'm finding confusing is the setup of aliases on the gateway. Do I need to use a random IP from my network for the inbound and outbound configuration, or should I be using the management IP of the gateway? Additionally, I'm tasked with onboarding a large amount of applications. Do I need to create an alias for each application I want to onboard?

I'm looking for help in understanding the specifics of reverse proxy mode. I'd greatly appreciate prompt and helpful responses. Thank you all.