From c323291969a4e6f3a6191b03319c452a2678ddf7 Mon Sep 17 00:00:00 2001 From: vvnginx Date: Wed, 20 Aug 2025 12:57:29 +0530 Subject: [PATCH 1/2] fix: Update setup-waf-config-management.md --- .../setup-waf-config-management.md | 40 ++++++++++--------- 1 file changed, 21 insertions(+), 19 deletions(-) diff --git a/content/nim/nginx-app-protect/setup-waf-config-management.md b/content/nim/nginx-app-protect/setup-waf-config-management.md index fa7a56bcc..252313044 100644 --- a/content/nim/nginx-app-protect/setup-waf-config-management.md +++ b/content/nim/nginx-app-protect/setup-waf-config-management.md @@ -55,6 +55,7 @@ The table below shows which WAF compiler version to use for each version of NGIN | NGINX App Protect WAF version | WAF compiler version | |-------------------------------|----------------------------| +| 5.8.0 | nms-nap-compiler-v5.498.0 | | 5.7.0 | nms-nap-compiler-v5.442.0 | | 5.6.0 | nms-nap-compiler-v5.342.0 | | 5.5.0 | nms-nap-compiler-v5.264.0 | @@ -62,6 +63,7 @@ The table below shows which WAF compiler version to use for each version of NGIN | 5.3.0 | nms-nap-compiler-v5.144.0 | | 5.2.0 | nms-nap-compiler-v5.48.0 | | 5.1.0 | nms-nap-compiler-v5.17.0 | +| 4.16.0 | nms-nap-compiler-v5.498.0 | | 4.15.0 | nms-nap-compiler-v5.442.0 | | 4.14.0 | nms-nap-compiler-v5.342.0 | | 4.13.0 | nms-nap-compiler-v5.264.0 | @@ -88,13 +90,13 @@ The table below shows which WAF compiler version to use for each version of NGIN To install the WAF compiler on Debian or Ubuntu, run the following command: ```shell -sudo apt-get install nms-nap-compiler-v5.442.0 +sudo apt-get install nms-nap-compiler-v5.498.0 ``` If you want to install more than one version of the WAF compiler on the same system, append the `--force-overwrite` option to the install command after the first installation: ```shell -sudo apt-get install nms-nap-compiler-v5.442.0 -o Dpkg::Options::="--force-overwrite" +sudo apt-get install nms-nap-compiler-v5.498.0 -o Dpkg::Options::="--force-overwrite" ``` {{< include "nim/nap-waf/restart-nms-integrations.md" >}} @@ -118,7 +120,7 @@ To install the WAF compiler on RHEL 8.1 : 3. Install the WAF compiler: ```shell - sudo yum install nms-nap-compiler-v5.442.0 + sudo yum install nms-nap-compiler-v5.498.0 ``` ### RHEL 9 @@ -140,7 +142,7 @@ To install the WAF compiler on RHEL 9: 3. Install the WAF compiler: ```shell - sudo yum install nms-nap-compiler-v5.442.0 + sudo yum install nms-nap-compiler-v5.498.0 ``` 4. {{< include "nim/nap-waf/restart-nms-integrations.md" >}} @@ -164,7 +166,7 @@ To install the WAF compiler on Oracle Linux 8.1: 3. Install the WAF compiler: ```shell - sudo yum install nms-nap-compiler-v5.442.0 + sudo yum install nms-nap-compiler-v5.498.0 ``` 4. {{< include "nim/nap-waf/restart-nms-integrations.md" >}} @@ -248,7 +250,7 @@ To install the WAF compiler on a system without internet access, complete these - **Step 2:** Move the generated package to the offline target system and install it. Note : Version of NAP compiler can be referred from the table at the top of this page. -Current latest version 5.442.0 at the point of writing this document is used in below commands. +Current latest version 5.498.0 at the point of writing this document is used in below commands. {{}} @@ -276,10 +278,10 @@ sudo tee /etc/apt/sources.list.d/nms.list sudo wget -q -O /etc/apt/apt.conf.d/90pkgs-nginx https://cs.nginx.com/static/files/90pkgs-nginx mkdir -p compiler && cd compiler sudo apt-get update -sudo apt-get download nms-nap-compiler-v5.442.0 +sudo apt-get download nms-nap-compiler-v5.498.0 cd ../ mkdir -p compiler/compiler.deps -sudo apt-get install --download-only --reinstall --yes --print-uris nms-nap-compiler-v5.442.0 | grep ^\' | cut -d\' -f2 | xargs -n 1 wget -P ./compiler/compiler.deps +sudo apt-get install --download-only --reinstall --yes --print-uris nms-nap-compiler-v5.498.0 | grep ^\' | cut -d\' -f2 | xargs -n 1 wget -P ./compiler/compiler.deps tar -czvf compiler.tar.gz compiler/ ``` @@ -320,10 +322,10 @@ sudo tee /etc/apt/sources.list.d/nms.list sudo wget -q -O /etc/apt/apt.conf.d/90pkgs-nginx https://cs.nginx.com/static/files/90pkgs-nginx mkdir -p compiler && cd compiler sudo apt-get update -sudo apt-get download nms-nap-compiler-v5.442.0 +sudo apt-get download nms-nap-compiler-v5.498.0 cd ../ mkdir -p compiler/compiler.deps -sudo apt-get install --download-only --reinstall --yes --print-uris nms-nap-compiler-v5.442.0 | grep ^\' | cut -d\' -f2 | xargs -n 1 wget -P ./compiler/compiler.deps +sudo apt-get install --download-only --reinstall --yes --print-uris nms-nap-compiler-v5.498.0 | grep ^\' | cut -d\' -f2 | xargs -n 1 wget -P ./compiler/compiler.deps tar -czvf compiler.tar.gz compiler/ ``` @@ -359,7 +361,7 @@ sudo wget -P /etc/yum.repos.d https://cs.nginx.com/static/files/nms.repo sudo yum-config-manager --disable rhel-9-appstream-rhui-rpms sudo yum update -y sudo mkdir -p nms-nap-compiler -sudo yumdownloader --resolve --destdir=nms-nap-compiler nms-nap-compiler-v5.442.0 +sudo yumdownloader --resolve --destdir=nms-nap-compiler nms-nap-compiler-v5.498.0 tar -czvf compiler.tar.gz nms-nap-compiler/ ``` @@ -401,7 +403,7 @@ EOF sudo yum update -y sudo mkdir -p nms-nap-compiler -sudo yumdownloader --resolve --destdir=nms-nap-compiler nms-nap-compiler-v5.442.0 +sudo yumdownloader --resolve --destdir=nms-nap-compiler nms-nap-compiler-v5.498.0 tar -czvf compiler.tar.gz nms-nap-compiler/ ``` @@ -1194,21 +1196,21 @@ sudo /opt/nms-nap-compiler/app_protect-/bin/apcompile -h **Example:** ```shell -sudo /opt/nms-nap-compiler/app_protect-5.442.0/bin/apcompile -h +sudo /opt/nms-nap-compiler/app_protect-5.498.0/bin/apcompile -h ``` **Expected output:** ```text USAGE: - /opt/nms-nap-compiler/app_protect-5.442.0/bin/apcompile + /opt/nms-nap-compiler/app_protect-5.498.0/bin/apcompile Examples: - /opt/nms-nap-compiler/app_protect-5.442.0/bin/apcompile -p /path/to/policy.json -o mypolicy.tgz - /opt/nms-nap-compiler/app_protect-5.442.0/bin/apcompile -p policyA.json -g myglobal.json -o /path/to/policyA_bundle.tgz - /opt/nms-nap-compiler/app_protect-5.442.0/bin/apcompile -g myglobalsettings.json --global-state-outfile /path/to/myglobalstate.tgz - /opt/nms-nap-compiler/app_protect-5.442.0/bin/apcompile -b /path/to/policy_bundle.tgz --dump - /opt/nms-nap-compiler/app_protect-5.442.0/bin/apcompile -l logprofA.json -o /path/to/logprofA_bundle.tgz + /opt/nms-nap-compiler/app_protect-5.498.0/bin/apcompile -p /path/to/policy.json -o mypolicy.tgz + /opt/nms-nap-compiler/app_protect-5.498.0/bin/apcompile -p policyA.json -g myglobal.json -o /path/to/policyA_bundle.tgz + /opt/nms-nap-compiler/app_protect-5.498.0/bin/apcompile -g myglobalsettings.json --global-state-outfile /path/to/myglobalstate.tgz + /opt/nms-nap-compiler/app_protect-5.498.0/bin/apcompile -b /path/to/policy_bundle.tgz --dump + /opt/nms-nap-compiler/app_protect-5.498.0/bin/apcompile -l logprofA.json -o /path/to/logprofA_bundle.tgz ``` ### Confirm NGINX Agent configuration on the NGINX App Protect WAF instance From 67ad814bdbbe3dd3424f4ab3c6332660097bfae7 Mon Sep 17 00:00:00 2001 From: vvnginx Date: Wed, 20 Aug 2025 11:23:39 +0530 Subject: [PATCH 2/2] fix: Update nim-app-protect-support.md Now NIM supports NAP version 4.16.0 and 5.8.0 as well! --- content/includes/nim/tech-specs/nim-app-protect-support.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/content/includes/nim/tech-specs/nim-app-protect-support.md b/content/includes/nim/tech-specs/nim-app-protect-support.md index 203e7c2ef..c4cb16b01 100644 --- a/content/includes/nim/tech-specs/nim-app-protect-support.md +++ b/content/includes/nim/tech-specs/nim-app-protect-support.md @@ -8,7 +8,7 @@ NGINX Instance Manager supports the following versions of [NGINX App Protect WAF | NGINX Instance Manager | NGINX App Protect WAF | |------------------------|------------------------------------| -| 2.17.0–2.20.0 | Release 4.8.0–4.15.0, 5.1.0–5.7.0 | +| 2.17.0–2.20.0 | Release 4.8.0–4.16.0, 5.1.0–5.8.0 | | 2.15.1–2.16.0 | Release 4.8.0–4.10.0 | | 2.14.1–2.15.0 | Release 4.4.0–4.7.0 | | 2.13.0–2.14.0 | Release 4.3.0–4.5.0 |