NGINX App Protect WAF 2.3

December 30, 2020

New Features

• Debian 10 Support
• Alpine 3.10 Support
• User-defined HTTP Headers
• Converter Tools
• Attack Signature Report Tool

Supported Packages

App Protect

Debian 9

• app-protect_23+3.281.0-1~stretch_amd64.deb

Debian 10

• app-protect_23+3.281.0-1~buster_amd64.deb

Ubuntu

• app-protect_23+3.281.0-1~bionic_amd64.deb

Alpine 3.10

• app-protect-23.3.281.0-r1.apk

CentOS / RHEL

• app-protect-23+3.281.0-1.el7.ngx.x86_64.rpm

Resolved Issues

• 1270 Fixed - Unit hostname N/A in security log.

Known Issues

3014 - HTTP2 browser traffic is classified as bot

• Workaround - Disable bot defense in policies used on HTTP2 locations.