This message was deleted.

If the proxy is internal then point the WAF config to that proxy. It needs internet access somehow.

in the dmz there isnt any internet access, i can access the waf from the lan. I cant see how you tell the waf to point to a proxy server though tbh. When you click on update signatures, i assume its using the SNIP then going to their DNS server (LAN) via a NAT to get to AWS url but gets lost or is blocked someone amongst their f.ws.

Hi Carl, i read that article though but it doesn't explain other than doing it manually how the auto update works. i cant do it the manual way.

I seem to recall from a course a while back that the WAF Proxy isn’t configured in the GUI and only via the CLI, will see if I can find the command.

i think it needs DNS and i suspect there DMZ NAT to LAN is blocking some traffic when the SNIP tries to then go external from the LAN and gets lost somewhere. From what i have read it just requires DNS for the auto update to work so that it can get to the AWS site. I have it working on other ADCs that arent in a DMZ just but justing a DNS server but this one is quite locked down in the DMZ. If there is a CLI command and you find it that would be handy as ive read alot of the reference material and havent come across it yet.

Need a way of telling the DMZ ADC how to find the internet. I’ll try and find the command today

Hi Carl, thanks for replying, Did you find it by any chance?

hi, had a look the other day and again right now but not seeing it for some reason, will continue to keep looking and report back if I find it.