Hi Mark, i have already used CAS server behind a Nginx and few rules in Lua scripting acting as WAF.
No problems at all regarding this. Next step is move to Mod_Security but still haven't tested mod_sec with nginx, and also we don't have plans to migrate to apache server in short. -J On Fri, Apr 3, 2015 at 11:03 AM, Mace, Mark <ma...@ohio.edu> wrote: > **bump** > > > > Anyone? Anyone? Bueller? > > > > Hi folks, just wanted to bump this, I am hoping to get a confirmation from > another institution that says "Yes, we are running CAS and a Web > Application Firewall and they play nice together". > > > > Thanks in advance, > > --mark > > > > *From:* Mace, Mark [mailto:ma...@ohio.edu] > *Sent:* Tuesday, March 31, 2015 10:43 AM > *To:* cas-user@lists.jasig.org > *Subject:* [cas-user] CAS and Web Application Firewall interaction > > > > Greetings all, we're working on setting up an installation of CAS here at > OHIO University. Someone higher up the ladder has become concerned with > how a Web Application Firewall (WAF) would interact with CAS as a SSO > solution. I would like some concrete examples to back up my opinion on > this, so I told my boss I would query this list with the following question: > > > > If you have implemented CAS and are also using a WAF, what issues, if any, > have you experienced? For additional clarification, and so I can pass this > information along to any working group that may form to evaluate a WAF in > the future, what are you using as a WAF? > > > > I appreciate any feedback, feel free to respond off list, unless there are > others on this list that would be interested in this information. > > > > Thanks. > > > > --mark > > > > OHIO UNIVERSITY > Application & Information Solutions > > Mark A. Mace > > Application Integration Specialist > > WUSOC 377 > > 1 Ohio University > Athens OH 45701-2979 > T: 740.593.0641 > ma...@ohio.edu > www.ohio.edu * www.ohio.edu/compass > www.twitter.com/ohiou > www.facebook.com/OhioUniversity > > The best student-centered learning experience in America > > > > > > > > > > > > > > -- > > You are currently subscribed to cas-user@lists.jasig.org as: ma...@ohio.edu > > To unsubscribe, change settings or access archives, see > http://www.ja-sig.org/wiki/display/JSG/cas-user > > -- > You are currently subscribed to cas-user@lists.jasig.org as: > junior...@gmail.com > To unsubscribe, change settings or access archives, see > http://www.ja-sig.org/wiki/display/JSG/cas-user > > -- Grato, Tozo -- You are currently subscribed to cas-user@lists.jasig.org as: arch...@mail-archive.com To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user
