diff --git a/content/includes/nim/tech-specs/nim-app-protect-support.md b/content/includes/nim/tech-specs/nim-app-protect-support.md index fda626499..203e7c2ef 100644 --- a/content/includes/nim/tech-specs/nim-app-protect-support.md +++ b/content/includes/nim/tech-specs/nim-app-protect-support.md @@ -8,7 +8,7 @@ NGINX Instance Manager supports the following versions of [NGINX App Protect WAF | NGINX Instance Manager | NGINX App Protect WAF | |------------------------|------------------------------------| -| 2.17.0–2.19.2 | Release 4.8.0–4.14.0, 5.1.0–5.6.0 | +| 2.17.0–2.20.0 | Release 4.8.0–4.15.0, 5.1.0–5.7.0 | | 2.15.1–2.16.0 | Release 4.8.0–4.10.0 | | 2.14.1–2.15.0 | Release 4.4.0–4.7.0 | | 2.13.0–2.14.0 | Release 4.3.0–4.5.0 | diff --git a/content/includes/nim/tech-specs/security-data-plane-dependencies.md b/content/includes/nim/tech-specs/security-data-plane-dependencies.md index 9b841627a..010ad835b 100644 --- a/content/includes/nim/tech-specs/security-data-plane-dependencies.md +++ b/content/includes/nim/tech-specs/security-data-plane-dependencies.md @@ -1,5 +1,10 @@ The Security Monitoring module requires the following versions of [NGINX App Protect WAF](https://docs.nginx.com/nginx-app-protect/) and [NGINX Plus](https://www.f5.com/products/nginx/nginx-plus) for the **data plane**: +{{< note >}} +In NGINX Instance Manager 2.18.0 and under, the Security Monitoring module was a separate package that was installed manually. +From NGINX Instance Manager 2.19.0 onward, Security Monitoring is part of the NGINX Instance Manager feature-set and is packaged by default; no manual installation or upgrade is needed. +{{< /note >}} + {{}} | Security Monitoring | NGINX App Protect WAF | diff --git a/content/includes/nim/tech-specs/security-management-plane-dependencies.md b/content/includes/nim/tech-specs/security-management-plane-dependencies.md index e135ae6dc..25eb8f0fc 100644 --- a/content/includes/nim/tech-specs/security-management-plane-dependencies.md +++ b/content/includes/nim/tech-specs/security-management-plane-dependencies.md @@ -1,6 +1,8 @@ The Security Monitoring module requires the following versions of NGINX Instance Manager to be installed on the **management plane**. -{{< note >}}The Security Monitoring module doesn’t automatically install or upgrade NGINX Instance Manager. You’ll need to manually install or upgrade NGINX Instance Manager to a supported version. +{{< note >}} +In NGINX Instance Manager 2.18.0 and under, the Security Monitoring module was a separate package that was installed manually. +From NGINX Instance Manager 2.19.0 onward, Security Monitoring is part of the NGINX Instance Manager feature-set and is packaged by default; no manual installation or upgrade is needed. {{< /note >}} {{}} diff --git a/content/nim/nginx-app-protect/setup-waf-config-management.md b/content/nim/nginx-app-protect/setup-waf-config-management.md index e8d2fb671..529c3f5ea 100644 --- a/content/nim/nginx-app-protect/setup-waf-config-management.md +++ b/content/nim/nginx-app-protect/setup-waf-config-management.md @@ -55,12 +55,14 @@ The table below shows which WAF compiler version to use for each version of NGIN | NGINX App Protect WAF version | WAF compiler version | |-------------------------------|----------------------------| +| 5.7.0 | nms-nap-compiler-v5.442.0 | | 5.6.0 | nms-nap-compiler-v5.342.0 | | 5.5.0 | nms-nap-compiler-v5.264.0 | | 5.4.0 | nms-nap-compiler-v5.210.0 | | 5.3.0 | nms-nap-compiler-v5.144.0 | | 5.2.0 | nms-nap-compiler-v5.48.0 | | 5.1.0 | nms-nap-compiler-v5.17.0 | +| 4.15.0 | nms-nap-compiler-v5.442.0 | | 4.14.0 | nms-nap-compiler-v5.342.0 | | 4.13.0 | nms-nap-compiler-v5.264.0 | | 4.12.0 | nms-nap-compiler-v5.210.0 | @@ -86,13 +88,13 @@ The table below shows which WAF compiler version to use for each version of NGIN To install the WAF compiler on Debian or Ubuntu, run the following command: ```shell -sudo apt-get install nms-nap-compiler-v5.342.0 +sudo apt-get install nms-nap-compiler-v5.442.0 ``` If you want to install more than one version of the WAF compiler on the same system, append the `--force-overwrite` option to the install command after the first installation: ```shell -sudo apt-get install nms-nap-compiler-v5.342.0 -o Dpkg::Options::="--force-overwrite" +sudo apt-get install nms-nap-compiler-v5.442.0 -o Dpkg::Options::="--force-overwrite" ``` {{< include "nim/nap-waf/restart-nms-integrations.md" >}} @@ -116,7 +118,7 @@ To install the WAF compiler on RHEL 8.1 or later: 3. Install the WAF compiler: ```shell - sudo yum install nms-nap-compiler-v5.342.0 + sudo yum install nms-nap-compiler-v5.442.0 ``` 4. {{< include "nim/nap-waf/restart-nms-integrations.md" >}} @@ -140,7 +142,7 @@ To install the WAF compiler on RHEL 7.4 or later or CentOS: 3. Install the WAF compiler: ```shell - sudo yum install nms-nap-compiler-v5.342.0 + sudo yum install nms-nap-compiler-v5.442.0 ``` 4. {{< include "nim/nap-waf/restart-nms-integrations.md" >}} @@ -167,7 +169,7 @@ To install the WAF compiler on Amazon Linux 2 LTS: 3. Install the WAF compiler: ```shell - sudo yum install nms-nap-compiler-v5.342.0 + sudo yum install nms-nap-compiler-v5.442.0 ``` 4. {{< include "nim/nap-waf/restart-nms-integrations.md" >}} @@ -192,7 +194,7 @@ To install the WAF compiler on Oracle Linux 7.4 or later: 3. Install the WAF compiler: ```shell - sudo yum install nms-nap-compiler-v5.342.0 + sudo yum install nms-nap-compiler-v5.442.0 ``` 4. {{< include "nim/nap-waf/restart-nms-integrations.md" >}} @@ -1004,21 +1006,21 @@ sudo /opt/nms-nap-compiler/app_protect-/bin/apcompile -h **Example:** ```shell -sudo /opt/nms-nap-compiler/app_protect-5.342.0/bin/apcompile -h +sudo /opt/nms-nap-compiler/app_protect-5.442.0/bin/apcompile -h ``` **Expected output:** ```text USAGE: - /opt/nms-nap-compiler/app_protect-5.342.0/bin/apcompile + /opt/nms-nap-compiler/app_protect-5.442.0/bin/apcompile Examples: - /opt/nms-nap-compiler/app_protect-5.342.0/bin/apcompile -p /path/to/policy.json -o mypolicy.tgz - /opt/nms-nap-compiler/app_protect-5.342.0/bin/apcompile -p policyA.json -g myglobal.json -o /path/to/policyA_bundle.tgz - /opt/nms-nap-compiler/app_protect-5.342.0/bin/apcompile -g myglobalsettings.json --global-state-outfile /path/to/myglobalstate.tgz - /opt/nms-nap-compiler/app_protect-5.342.0/bin/apcompile -b /path/to/policy_bundle.tgz --dump - /opt/nms-nap-compiler/app_protect-5.342.0/bin/apcompile -l logprofA.json -o /path/to/logprofA_bundle.tgz + /opt/nms-nap-compiler/app_protect-5.442.0/bin/apcompile -p /path/to/policy.json -o mypolicy.tgz + /opt/nms-nap-compiler/app_protect-5.442.0/bin/apcompile -p policyA.json -g myglobal.json -o /path/to/policyA_bundle.tgz + /opt/nms-nap-compiler/app_protect-5.442.0/bin/apcompile -g myglobalsettings.json --global-state-outfile /path/to/myglobalstate.tgz + /opt/nms-nap-compiler/app_protect-5.442.0/bin/apcompile -b /path/to/policy_bundle.tgz --dump + /opt/nms-nap-compiler/app_protect-5.442.0/bin/apcompile -l logprofA.json -o /path/to/logprofA_bundle.tgz ``` ### Confirm NGINX Agent configuration on the NGINX App Protect WAF instance