Re: [mod-security-users] ModSecurity v3

[Michael W. <sco...@ya...>]

Thanks for the reply
Tel:       01257 266394 Mobile: 07944032617 Email:  sco...@ya... 

    On Thursday, 30 September 2021, 22:13:25 BST, Christian Folini <chr...@ne...> wrote:  
 
 Hey Michael,

A lot of people use ModSec3 successfully in production and the developers have
it labelled as production ready for NGINX for several years.

Personally, I see that ModSec3 is not passing the entire test suite for CRS
(2-3% of tests are failing) and I am not satisfied with the performance.

Also: ModSec 2.9.x on Apache is still the reference implementation for CRS.

Hope this helps to put everything in perspective.

Best,

Christian

On Thu, Sep 30, 2021 at 12:47:10PM +0000, Michael Woods via mod-security-users wrote:
> Hi Everyone,Is version 3 of ModSecurity now production ready? It's not clear from the Github page.RegardsMike


> _______________________________________________
> mod-security-users mailing list
> mod...@li...
> https://lists.sourceforge.net/lists/listinfo/mod-security-users
> Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs:
> http://www.modsecurity.org/projects/commercial/rules/
> http://www.modsecurity.org/projects/commercial/support/



_______________________________________________
mod-security-users mailing list
mod...@li...
https://lists.sourceforge.net/lists/listinfo/mod-security-users
Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs:
http://www.modsecurity.org/projects/commercial/rules/
http://www.modsecurity.org/projects/commercial/support/