Great! Thank you for the response. --mark
From: J. Tozo [mailto:[email protected]] Sent: Friday, April 03, 2015 2:40 PM To: [email protected] Subject: Re: [cas-user] CAS and Web Application Firewall interaction Hi Mark, i have already used CAS server behind a Nginx and few rules in Lua scripting acting as WAF. No problems at all regarding this. Next step is move to Mod_Security but still haven't tested mod_sec with nginx, and also we don't have plans to migrate to apache server in short. -J On Fri, Apr 3, 2015 at 11:03 AM, Mace, Mark <[email protected]<mailto:[email protected]>> wrote: *bump* Anyone? Anyone? Bueller? Hi folks, just wanted to bump this, I am hoping to get a confirmation from another institution that says "Yes, we are running CAS and a Web Application Firewall and they play nice together". Thanks in advance, --mark From: Mace, Mark [mailto:[email protected]<mailto:[email protected]>] Sent: Tuesday, March 31, 2015 10:43 AM To: [email protected]<mailto:[email protected]> Subject: [cas-user] CAS and Web Application Firewall interaction Greetings all, we're working on setting up an installation of CAS here at OHIO University. Someone higher up the ladder has become concerned with how a Web Application Firewall (WAF) would interact with CAS as a SSO solution. I would like some concrete examples to back up my opinion on this, so I told my boss I would query this list with the following question: If you have implemented CAS and are also using a WAF, what issues, if any, have you experienced? For additional clarification, and so I can pass this information along to any working group that may form to evaluate a WAF in the future, what are you using as a WAF? I appreciate any feedback, feel free to respond off list, unless there are others on this list that would be interested in this information. Thanks. --mark OHIO UNIVERSITY Application & Information Solutions Mark A. Mace Application Integration Specialist WUSOC 377 1 Ohio University Athens OH 45701-2979 T: 740.593.0641 [email protected]<mailto:[email protected]> www.ohio.edu<http://www.ohio.edu> * www.ohio.edu/compass<http://www.ohio.edu/compass> www.twitter.com/ohiou<http://www.twitter.com/ohiou> www.facebook.com/OhioUniversity<http://www.facebook.com/OhioUniversity> The best student-centered learning experience in America -- You are currently subscribed to [email protected]<mailto:[email protected]> as: [email protected]<mailto:[email protected]> To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user -- You are currently subscribed to [email protected]<mailto:[email protected]> as: [email protected]<mailto:[email protected]> To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user -- Grato, Tozo -- You are currently subscribed to [email protected]<mailto:[email protected]> as: [email protected]<mailto:[email protected]> To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user -- You are currently subscribed to [email protected] as: [email protected] To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user
