Page tree
Skip to end of metadata
Go to start of metadata

Below, a table containing the features ported so far from rWeb with their corresponding terminology in Rohde & Schwarz WAF. Support of more features will be added in future version of Rohde & Schwarz WAF:

Application

FamilyrWeb featureMigrationRohde & Schwarz WAF featureNotes
ApplicationGroupsAutomaticLabels

Network - Direct Client AccessAutomaticTunnel - Network

PoolingManualTunnel - Network: Pooling

WebsocketAutomaticProxy Request node from workflow

Manual OutgoingNoN/AUse Advanced Parameters profile for tunnels.

Transparent modeNoN/ATransparent mode not available.

SSLAutomaticTunnel - SSL

Redirect HTTP to HTTPSAutomaticTunnel - SSL

URL RewriteNoRewrite Rule node from workflowA rewrite rule is one rewrite rule node. The node cannot take a list. Rewrite rule nodes have to be chained.

Custom DirectiveManualAdvanced Parameters profileUse Advanced Parameters profile for tunnels.

Error pagesManualWorkflow settings and static content bundle

Health checkAutomaticTunnel - Monitoring

Advanced RP configManualAdvanced Parameters profileUse Advanced Parameters profile for Reverse Proxy.

DascriptNoN/AExceptions handled by dascripts have to be migrated in a Security Exception profile.

Security

FamilyrWeb featureMigrationRohde & Schwarz WAF featureNotes
SecurityCanonizationAutomaticNormalization node from workflow

HTTP RequestManualWorkflow settings

HTTP ResponseManualWorkflow settings

Stateful cookie trackingManualCookie tracking node from workflow

Stateful HTTP onlyManualWorkflow settings

Blacklist

AutomaticBlacklist engine node from workflow and Blacklist Configuration profileAll rules and exceptions are migrated in a Blacklist Configuration profile. Only exception are visible. Migrated rules cannot be modified.

ScoringlistAutomaticScoringlist engine node from workflow and Scoringlist Configuration profileAll rules and exceptions are migrated in a Scoringlist Configuration profile.

WhitelistNoSitemap or ICX in whitelist mode

Generate Whitelist form logsNoLearning logs node from workflow

User Behavior TrackingManualUser Reputation Scoring nodes from workflow

Client ShieldNoN/A

Outgoing filteringManualWorkflow settings but no specialized engine

Advanced SQLi engineAutomaticAdvanced Security Engine - SQLi node from workflow

Advanced HTML security engineAutomaticAdvanced Security Engine - XSS node from workflow

Advanced Commands injection engineAutomaticAdvanced Security Engine - CMDi node from workflow

Advanced Path traversal security engineAutomaticAdvanced Security Engine - Path traversal node from workflow

Advanced Code Injection security engineNoN/A

ExceptionsNoSecurity Exception Configuration profile

HTTP Blacklist TemplatesAutomaticBlacklist Templates in Blacklist Configuration profiles

HTTP Scoringlist TemplatesAutomaticScoringlist Templates in Scoringlist Configuration profiles

Setup

FamilyrWeb featureMigrationRohde & Schwarz WAF featureNotes
Setup
InterfacesNoNetwork interfacesInterfaces Items (as references in the Restoration system). Cannot be restored.

IP addresses

AutomaticIP addressesLink between IP addresses and Network interfaces has to be done during the backup restoration.

TimeAutomaticNTP Servers

SyslogAutomaticAlerting Destination - Syslog
  • Link between Tunnel and Alerting profile has to be manually done AFTER backup restoration.
  • WARNING: rWeb and R&S WAF syslog granularity is different. All syslog profiles will be created but mapping will have to be done on each tunnel.
  • In case we have different destination in rWeb for Alerts & Traffic , the fallback in R&S WAF is to use (traffic) access logs in Tunnels.
  • No UDP6 or TCP6 destination support.

SMTPAutomaticAlerting Destination - SMTPLink between Tunnel and Alerting profile has to be manually done AFTER the backup restoration.

Host & DNSManualHost & DNSDownload the host file from rWeb then import it.

  • No labels