Cyber Security News Aggregator
.Cyber Tzar
provide acyber security risk management
platform; including automated penetration tests and risk assesments culminating in a "cyber risk score" out of 1,000, just like a credit score.
First slide label
Some representative placeholder content for the first slide.
Second slide label
Some representative placeholder content for the second slide.
Third slide label
Some representative placeholder content for the third slide.
Smooth upgrading of OWASP CRS3 to CRS4
published on 2025-11-21 09:12:01 UTC by /u/dune73Content:
Performing a major upgrade of your CRS WAF rules usually means you need to lower your defenses to accommodate for the new false positives.
Netnea.com has released a GPL licensed CRS plugin (the netnea-crs-upgrading-plugin) that allows you to perform this transition in a smooth way without need to change your anomaly threshold. Leveraging a parallel installation, the plugin allows you to run CRS4 in monitoring mode on a CRS3 installation, to route certain URIs to CRS4 and also to sample a certain percentage through CRS4 while the rest remains on CRS3. The CRS upgrading will no longer be a leap of faith, but a calculated transition.
See the blog post at https://www.netnea.com/cms/2025/11/20/the-new-netnea-crs-upgrading-plugin-simplifying-the-migration-from-crs-v3-to-v4/
[link] [comments]
https://www.reddit.com/r/netsec/comments/1p2tzin/smooth_upgrading_of_owasp_crs3_to_crs4/
Published: 2025 11 21 09:12:01
Received: 2025 11 21 09:33:43
Feed: /r/netsec - Information Security News and Discussion
Source: /r/netsec - Information Security News and Discussion
Category: Cyber Security
Topic: Cyber Security
Views: 8
