Answers.Body: <p>we have a slightly different approach for an enhanced security architecture using a proxy-server plus vpn. If you are interested, please sind more information plus code on <a href="https://github.com/systopia/CiviProxy">GitHub</a>, there was also a <a href="https://www.youtube.com/watch?v=JKNR0bDjB9k">session</a> on last year's CiviCon.</p>
  
  <p>Let me know if you have any questions regarding CiviProxy.</p>
  
  <p>Kind Regards
  Fabian</p>
  
Answers.ContentLicense: CC BY-SA 3.0
Answers.CreationDate: 2016-03-11T13:35:19.507Z
Answers.LastActivityDate: 2016-03-11T13:35:19.507Z
Answers.UserDisplayName: Fabian
Answers.Body: <p>I've configured CiviCRM behind both <a href="http://www.apsis.ch/pound/" rel="nofollow noreferrer">Pound</a> and <a href="http://nginx.org/" rel="nofollow noreferrer">NginX</a>. Both worked perfectly well, no complaints. If there were any special configurations required, they can't have been troublesome enough to remember :)</p>
  
  <p>You will need to ensure CiviCRM is capable of "accessing itself", since some requests (eg dashboard contents) are made to the current CiviCRM website. This includes DNS / web access from the webserver CiviCRM is running on - see <a href="https://civicrm.stackexchange.com/questions/4448/ssl-enabled-civicrm-with-forever-loading-dashlets/4453#4453">this answer</a>.</p>
  
Answers.ContentLicense: CC BY-SA 3.0
Answers.CreationDate: 2016-03-30T20:04:10.557Z
Answers.LastActivityDate: 2016-03-30T20:04:10.557Z
Answers.LastEditDate: 2017-04-13T12:53:13.017Z
Answers.UserDisplayName: Chris Burgess
Body: <p>We're looking at deployment for a client who's sensitive to being hacked, so we want to put CiviCRM behind, say, nginx running mod_security2.  Has anyone used a WAF with CiviCRM that can share recommendations?</p>
  
Tags: <security><sysadmin>
Title: Does anyone use CiviCRM behind a Web Application Firewall?
ThreadText: # Does anyone use CiviCRM behind a Web Application Firewall?
  
  (Asked by: username_0 on 2016-03-10)
  
  We're looking at deployment for a client who's sensitive to being hacked, so we want to put CiviCRM behind, say, nginx running mod\_security2. Has anyone used a WAF with CiviCRM that can share recommendations?
  
  **Tags:** security, sysadmin
  
  
  ---
  
  ## 2 answers
  
  ### Answer by username_1 on 2016-03-11. Score: 5
  
  we have a slightly different approach for an enhanced security architecture using a proxy-server plus vpn. If you are interested, please sind more information plus code on [GitHub](https://github.com/systopia/CiviProxy), there was also a [session](https://www.youtube.com/watch?v=JKNR0bDjB9k) on last year's CiviCon.
  
  Let me know if you have any questions regarding CiviProxy.
  
  Kind Regards
  username_1
  
  
  ---
  
  ### Answer by username_2 on 2016-03-30. Score: 1
  
  I've configured CiviCRM behind both [Pound](http://www.apsis.ch/pound/) and [NginX](http://nginx.org/). Both worked perfectly well, no complaints. If there were any special configurations required, they can't have been troublesome enough to remember :)
  
  You will need to ensure CiviCRM is capable of "accessing itself", since some requests (eg dashboard contents) are made to the current CiviCRM website. This includes DNS / web access from the webserver CiviCRM is running on - see [this answer](https://civicrm.stackexchange.com/questions/4448/ssl-enabled-civicrm-with-forever-loading-dashlets/4453#4453).
  
  
  ---
  
  