Installing UMP-365 Behind WAF-Best Practices

UMP-365 (the application) runs on a Windows Virtual machine, with IIS as its web server. A WAF (Web Application Firewall) is used to filter and inspects incoming web traffic before it reaches your application. When your client browser connects over HTTPS, the web server (IIS) holds the SSL/TLS certificate and performs the authentication. SSL offloading occurs when the WAF handles the HTTPS connection instead of the IIS which only listens on HTTP port 80. This section describes how to setup, check, and read the security vulnerability scan reports that are run on the UMP-365 VM.