Create App Protect Image with Attack Signatures & Threat Campaigns (Ensure you copy your .crt & .key in the same directory)
docker build --no-cache -t app-protect .
Test Step 1:
docker images
Ensure that you can now view the newly created image
docker-compose up -d
Test Step 2:
docker ps
Ensure that you are now able to view two running containers
On your browser open http://localhost
port:80 to run DVWA Application
username: admin password: password
On your browser open http://localhost:8080
to view the live activity metrics from your N+ instance
Creds for Dashbaord:
user1:Welcome@user1
user2:Welcome@user2
Following are the metrics available when you have enabled the "zone" directive in the upstream context:
Following are the metrics available when you have status_zone directive enabled in your location/server context:
It is configured via nginx.conf and can be accessed via browswer:
http://dvwa.example.com:8090/liveness
- Where expected response should be "Alive"
Command Injection - /vulnerabilities/exec/ Stored Cross Site Scripting - Dataguard - /vulnerabilities/xss_s/
- You can add self-signed certificate in the nginx.conf file
- Include multiple policy files as required for specific end-points
- Export logs to ELK or write to local drive