Skip to content

Commit baf18fb

Browse files
committed
NGINXaaS Custom Security Policies
Updated doc to support the use of NGINX App Protect custom security policies.
1 parent dc63cf2 commit baf18fb

File tree

4 files changed

+25
-2
lines changed

4 files changed

+25
-2
lines changed

Diff for: content/nginxaas-azure/app-protect/configure-waf.md

+22-1
Original file line numberDiff line numberDiff line change
@@ -101,7 +101,28 @@ The following table shows the path to the precompiled policy file that needs to
101101

102102
To view the contents of the available security policies, navigate to the azure portal and select the **Security Policies** tab in the App Protect section.
103103

104-
{{<note>}}Custom policies are not supported at this time.{{</note>}}
104+
## Custom Policies
105+
106+
NGINXaas for Azure also supports custom security policies. You can create and modify custom security policies to deploy to NGINX App Protect Instances using the API or Azure Portal.
107+
108+
### Manage Custom Policies
109+
110+
To create a custom security policy in the Azure Portal:
111+
112+
1. Select your deployment
113+
2. Select **NGINX app protect WAF** from the menu on the left
114+
3. Select **Custom Policies**
115+
4. Select **Add Custom Security Policy** to open the policy editor
116+
117+
In the policy editor, enter the **Name**, **File path**, your policy content, and then select **Save**.
118+
119+
{{< img src="nginxaas-azure/custom-policy-editor.png" alt="NGINXaaS Custom Policy Editor." >}}
120+
121+
After your policy has been saved, you can then reference it in your NGINX configuration the same as you did for precompiled policies. For more information on policy configuration and syntax, refer to the NGINX App Protect [configuration guide](https://docs.nginx.com/nginx-app-protect-waf/v5/configuration-guide/configuration/).
122+
123+
{{<note>}}The **name** field within the security policy must be unique among the policies referenced in your NGINX configuration.{{</note>}}
124+
{{<note>}}Referencing both custom and precompiled policies in you NGINX configuration is not supported at this time.{{</note>}}
125+
105126

106127
## What's next
107128

Diff for: go.mod

+1-1
Original file line numberDiff line numberDiff line change
@@ -2,4 +2,4 @@ module github.com/nginxinc/docs
22

33
go 1.19
44

5-
require github.com/nginxinc/nginx-hugo-theme v0.42.1 // indirect
5+
require github.com/nginxinc/nginx-hugo-theme v0.42.27 // indirect

Diff for: go.sum

+2
Original file line numberDiff line numberDiff line change
@@ -1,2 +1,4 @@
11
github.com/nginxinc/nginx-hugo-theme v0.42.1 h1:SYj7R7fKPYwtbQobTcJWy/ZWQxa5tlHCSJfU2dxYXxY=
22
github.com/nginxinc/nginx-hugo-theme v0.42.1/go.mod h1:DPNgSS5QYxkjH/BfH4uPDiTfODqWJ50NKZdorguom8M=
3+
github.com/nginxinc/nginx-hugo-theme v0.42.27 h1:D80Sf/o9lR4P0NDFfP/hCQllohz6C5qlJ4nGNfdfnqM=
4+
github.com/nginxinc/nginx-hugo-theme v0.42.27/go.mod h1:DPNgSS5QYxkjH/BfH4uPDiTfODqWJ50NKZdorguom8M=

Diff for: static/nginxaas-azure/custom-policy-editor.png

56.1 KB
Loading

0 commit comments

Comments
 (0)