Nemesida WAF Release Notes 2024 | Nemesida WAF

Minor fixes related to the processing of the PID file.

Fixes related to obtaining specifications created by Nemesida AI MLC when accessing
/nw-api/get_openapi_schema_paths.

Fixes related to the logging and configuration file processing system.

Added a check that forbids the simultaneous use of the readOnly and writeOnly parameters with the value true in the OpenAPI specification.

Dynamic module:

• Added compatibility with the satisfy any web-server option.

Dynamic module:

• Added compatibility with the satisfy any web-server option.

Minor fixes related to running the module in recheck mode.

Dynamic module:

• Minor fixes and improvements.

Nemesida AI MLA:

• Fixes related to the Nemesida API Firewall;
• Other minor improvements.

Dynamic module:

• Added support for Angie 1.5.0;
• Minor fixes and improvements.

Nemesida AI MLA:

• Fixes related to the Nemesida API Firewall;
• Other minor improvements.

• Minor fixes related to DBMS interaction;
• Fixes related to the display of an extended description of the reason for blocking the request by the Nemesida API Firewall module with an empty value.

• Improved the mechanism of interaction with RabbitMQ;
• Improved the mechanism of processing GeoCC data.

Minor fixes related to the database structure and changes in the pandas library.

Dynamic module:

• Removed support for the mechanism for unlocking an IP address using a captcha (Captcha v1);
• The mechanism for unlocking an IP address using a captcha (Captcha v2) is outdated and is not recommended for further use;
• Added support for a new mechanism for unlocking IP addresses using captcha (Captcha v3);
• Added support for the ICAP protocol for interacting with antivirus solutions;
• Other fixes and improvements.

Dynamic module:

• Removed support for the mechanism for unlocking an IP address using a captcha (Captcha v1);
• The mechanism for unlocking an IP address using a captcha (Captcha v2) is outdated and is not recommended for further use;
• Added support for a new mechanism for unlocking IP addresses using captcha (Captcha v3);
• Added support for the ICAP protocol for interacting with antivirus solutions;
• Other fixes and improvements.

Due to the end of support for Docker containers nwaf-web/nwaf-web-pg (Nemesida WAF API, Nemesida WAF Cabinet, PostgreSQL), the release of updates for them is discontinued. It is recommended to perform migration of components to new containers according to the instructions.

Fixes related to the use of python libraries and interaction with the database.

• Fixes related to database interaction;
• Other minor improvements.

Nemesida AI MLA:

• Fixes related to functionality changes in the python library netaddr;
• Fixes related to the operation of the API Firewall;
• Added blocking of requests during analysis by the API Firewall module if the request body is sent in JSON format with duplicate keys..

Nemesida AI MLA:

• Fixes related to functionality changes in the python library netaddr;
• Fixes related to the operation of the API Firewall;
• Added blocking of requests during analysis by the API Firewall module if the request body is sent in JSON format with duplicate keys.

• Fixes related to sending requests with detected anomalies in the Nemesida WAF API;
• Fixes related to functionality changes in the python library netaddr;
• Other fixes and improvements.

Due to the end of support for Python 3.7 (security updates and bug fixes in Python or pip), the release of component updates for the distribution Debian 10 is discontinued. To prevent incorrect interaction of the Nemesida WAF components, we recommend updating the component servers to the distribution versions with the current version of Python. You can check the version status of Python here.

• Fixed incorrect display of parameter values in the Nemesida WAF settings section;
• Added support for an extended description of the reason for blocking the request by the Nemesida API Firewall module;
• Added the ability to delete all entries in the behavioral model settings section;
• Other fixes and improvements.

• Minor fixes related to the functionality of configuring behavioral models;
• Fixes related to functionality changes in the python library netaddr.

Dynamic module:

• Added support for Nginx 1.25.4 Mainline and Nginx Plus R31.

Dynamic module:

• Added support for Angie 1.4.1.

Minor fixes related to the processing of the configuration file.