HOME » Documents » KUSANAGI 9 Commands » waf on

waf on

waf on

Turns on WAF.

Example

kusanagi waf on

In case of Security Edition:
kusanagi waf on kusanagi_html

Options

Profile Name

[profile]

Default: The current directory profile

If "profile" is specified, the "waf" of the specified profile will be processed.
However, if the current directory is not a profile, an error will occur.

Remarks

For WAF functionality, ModSecurity is used for Apache HTTP Server and NAXSI for nginx.

To customize NAXSI settings, you can edit the following files:

/etc/opt/kusanagi/nginx/naxsi.d/*/user.conf

In case of Security Edition:
/etc/opt/kusanagi/nginxXXX/naxsi.d/*/user.conf (where XXX is the version of nginx)

To customize ModSecurity (Apache HTTP Server) settings, you can edit the following files:

/etc/opt/kusanagi/httpd/modsecurity.d/kusanagi_activated_rules/*/user.conf

In case of Security Edition:
/etc/opt/kusanagi/httpdXX/modsecurity.d/kusanagi_activated_rules/*/user.conf (where XX is the version of httpd)

Output

# kusanagi waf on
waf completed.

In case of Security Edition:
# kusanagi waf on kusanagi_html
waf completed.