Hi,

(I am new to ASL and in the process of learning it)

I am trying to understand the TWAF feature.
I created a test site, and submited T-WAF data for that site.

Now what ? , I am not sure what's the main idea here..

Thanks,
Eli.

The T-WAF can be used to operate the ASL system as a proxy server for another server. This is useful for example if you have windows servers that you need WAF protection for.

There are currently 4 modes:

1) embedded, this is tracking the internal mod_security package in the local httpd daemon
2) local, used to provide WAF protections for another locally installed HTTP server. Nginx, litespeed, and other daemons that do not have WAF support

3) remote, proxy mode for other server(s)
4) plesk, a template for plesk environments. This is just like the local mode, except with some extra tweaks for plesk environments to clean up logging.