NGINX App Protect WAF Release 4.5

August 15, 2023

This release includes new signatures for Anti Automation (bot defense):

  • Added the following Crawler bot signatures: SEOChecker, ev-crawler, FFZBot ImageGrabber, ConveraCrawler, EveryoneSocialBot, Google Ads Bot
  • Added the following HTTP Library bot signatures: Airbnb calendar importer
  • Added the following Exploit Tool bot signatures: ThinkPHP Malicious Bot, KPLR-requests
  • Added the following Service Agent bot signatures: Pleroma, ChatGPT-User, Netflix Media Player, KickFire Extension
  • Added the following Social Media Agent bot signatures: Misskey Agent, Lemmy Agent
  • Added the following Site Monitor bot signatures: StatusCake Monitor
  • Added the following Web Downloader bot signatures: Transmission Bot

New Feature

In this release, NGINX App Protect WAF supports NGINX Plus R30.

Supported Packages

App Protect

Alpine 3.16
  • app-protect-30.4.457.0-r1.apk
Alpine 3.17
  • app-protect-30.4.457.0-r1.apk
CentOS 7.4+ / RHEL 7.4+ / Amazon Linux 2
  • app-protect-30+4.457.0-1.el7.ngx.x86_64.rpm
Debian 11
  • app-protect_30+4.457.0-1~bullseye_amd64.deb
Oracle Linux 8.1+
  • app-protect-30+4.457.0-1.el8.ngx.x86_64.rpm
RHEL 8.1+
  • app-protect-30+4.457.0-1.el8.ngx.x86_64.rpm
Ubuntu 20.04
  • app-protect_30+4.457.0-1~focal_amd64.deb

NGINX Plus

  • NGINX Plus R30

Resolved Issues

  • 8976 Fixed - When using multiple arcsight remote loggers for NGINX App Protect WAF policy, some requests may cause enforcer to crash.
  • 8312 Fixed - Running the get-signatures utility writes output to a different location.
  • 8936 Fixed - To reduce potential false positives, user defined Headers and Cookies that do not specify whether their decodeValueAsBase64 value, are now disabled instead of enabled by default.
  • 8939 Fixed - The issue with rejected gRPC request support id logged as “Passed” has been fixed.
  • 8821 Fixed - The Override Rules now support gRPC traffic. The previous limitation regarding the use of Override Rules with gRPC traffic has been resolved.
  • 9061 Fixed - Evasions configuration does not work in an Override Rule policy.

Important Note

  • Starting with this release, Ubuntu 18.04 support has been deprecated.