@avarx_ is part of the Swiss team for the European Cyber Security Challenges and also a member of the TYPO3 security team. I joined with him to start a set of TYPO3 rule exclusions for the OWASP ModSecurity Core Rule Set 3.0 (short CRS3). This is a set of rules to be deployed on a WAF in order to […]
This is a Zenpack for Fortinet FortiGate firewalls. The Fortigate MIB is very well-designed and allowed for a comprehensive Zenpack implementation using zenpacklib. Features: serial number and firmware version interface traffic CPU load memory load disk usage session count IPS statistics Sensors (voltage, temperature, fans, PSU) Vdoms Per Vdom : interface traffic CPU load memory […]
What I like about Ivan Ristić’s ModSecurity Book is the wide approach it takes. The multipurpose nature of ModSecurity makes it hard to overview all the areas and all the functionality. But Ivan did a very good job providing a gentle introduction to all these areas. Hence, it proved to be the standard book for […]
Event transformation is a cool feature of Zenoss, but care must be taken to avoid slowing down Zenoss too much, as badly performing event transformations applied to a large number of events might slow down Zenoss. Besides, any exception within an event transformation ends up in $ZENHOME/log/zeneventd.log, so your code needs extra care to avoid […]
The new Core Rule Set 3.0 (CRS3) release simplifies ModSecurity/Drupal integration tremendously. Here is a guide aimed at the Drupal community to learn how to work with ModSecurity. This guide and the rule file it is based on currently covers Drupal Core. Modules / Plugins are not yet supported. But count on the Drupal community […]
