I want to use Mod Security as transparent mode. Mod security WAF should be between server and client and client provided with only server's ip address to access the site. The client should not aware about the presence of Mod security since it provided server's ip address unlike in reverse proxy mode. Is it possible to use mod security as mentioned above.?

I want to deploy mod security as transparent proxy (layer 7). As imperva has deployed WAF. See Deployment Modes in specification Tab Link .

  • 1
    It's not clear to me what you're asking. ModSecurity is a server-side technology. It doesn't sit between your server and client. – Rushyo Feb 28 '13 at 11:11

ModSecurity is just a module for apache web server and we need to to add Modsecurity module in the apache configuration for the modsecurity to work. In order for the modsecurity to work we need to configure modsecurity as a reverse proxy we need to configure apache configuration like an example.

enter image description here

For the understanding of basic reverse proxy configuration i would recommend you to read Improve LAMP security with Apache Proxy's directive (mod_proxy)

| improve this answer | |
  • Thank you for your answer but its not my answer and I'm expecting my correct answer from you @Ali sir.Please check the link provided in question and see what I said to check. – Daniel Exar Mar 3 '13 at 17:05
  • @DanielExar you can configure apache 2.2 as a transparent proxy and configure modsecurity with it. you can read this gossamer-threads.com/lists/apache/users/312902 – Ali Ahmad Mar 4 '13 at 9:24

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.