Skip to content

Page permalink

Always use the following permalink when referencing this page. It will remain unchanged in future help versions.

https://docs.sophos.com/nsg/sophos-firewall/23.0/Help/en-us/webhelp/onlinehelp/index.html?contextId=web-server

Web server

You can protect web servers against Layer 7 (application) vulnerability exploits, such as cookie, URL, and form manipulation. You can configure the web servers you want to protect and the protection and authentication policies. To protect the web servers, you add them and the policies to Web Application Firewall (WAF) rules. General settings apply to all the protected web servers.

Restriction

You can create a maximum of 100 WAF rules. See WAF rules creation limit.

WAF doesn't support WebDAV, so applications such as Nextcloud aren't supported. We recommend that you route such traffic through firewall rules instead of WAF rules.

To manage the WAF service, go to System services > Services.