ABOUT THE TOPIC


 

This guide lists the software compatibility information for Virsec Security Platform (VSP) including VSP-Web, VSP-Memory and VSP-Host. The information provided covers the management infrastructure and supported server environments. Compatibility is based on VSP 2.5 release unless otherwise noted.  

 

 

 

 

COMPATIBILITY MATRIXCOMPATIBILITY MATRIX

 

FOR CONTAINERS

 

Table below provides the software compatibility information for Workload Type - Containers

 

Operating System

Executable Allowlisting

AppControl Policies

File System Monitoring

Buffer Exploit Protection

Web Application Protection

Java PHP ROR

Node.js

On Web Server

RHEL7.6

     

UBUNTU16.04

   

UBUNTU18.04

     

UBUNTU20

 

     

 

 

DEBIAN-BUSTER-SLIM

 

 

     

DEBIAN-BUSTER 

 

 

 

 

 

DEBIAN-STRETCH-SLIM

   

 

     

DEBIAN-STRETCH

   

 

 

 

 

ALPINE3.6

 

 

 

 

 

ALPINE3.7

 

 

 

 

 

ALPINE3.8

 

 

 

 

 

 

ALPINE3.9

 

 

 

 

 

ALPINE3.10

 

 

 

 

 

ALPINE3.11

 

 

 

 

 

ALPINE3.12

 

 

 

 

 

ALPINE3.13

 

 

     

Table – Compatibility Matrix for Containers

 

 

 

FOR VIRTUAL MACHINES

 

Table below provides the software compatibility information for Workload Type – Virtual Machines

 

Operating System

Executable Allowlisting

AppControl Policies

File System Monitoring

Memory Exploit Protection

Buffer Exploit Protection

Web Application Protection

Java

PHP

ROR

Node.js

.NET

On Web Server

RHEL 6.5, 6.7/ CentOS 6.5, 6.7

          NA  

RHEL 6.10 (32 bit)

              NA  

RHEL7.6/ CentOS 7.6

✔*

 

NA

RHEL8.0/ CentOS 8.0

✔*

 

NA

UBUNTU16

✔*

 

 

NA

UBUNTU18

✔*

 

NA

UBUNTU20

✔*

 

NA

DEBIAN-9/STRETCH

✔*

 

 

NA

 

AMAZONLINUX-1

 

NA

 

AMAZONLINUX-2

 

NA

 

WINDOWS 2008 R2 SP1

 

 

NA

 

WINDOWS 2012 R2

 

WINDOWS 2016

 

WINDOWS 2019

 

Table – Compatibility Matrix for VMs

 

* Memory Exploit Protection supported in a few kernels only. Refer Section  Supported Kernel Versions for Memory Exploit Protection for more information

 

NOTE:  

VSP is not supported for:

  • Workloads running SELinux in enforcing mode (Linux only)

  • Hosts running hypervisor: Example ESXi/Hyper-V/Zen/KVM

  • Hosts running docker (Linux only)

  

CONTAINER ORCHESTRATION SUPPORT

 

Table below provides the Container Orchestration Support information:

 

Container Orchestration Type

VSP Deployment

Workload Deployment

Notes

Kubernetes - Kubectl

Supported versions:

Kubernetes - 1.18, 1.19, 1.20, 1.21, 1.22

Docker Engine - 19.03  

Helm Charts

Supported versions: Helm 2, Helm 3

Docker-only

 

Supported Docker Versions:  18.x, 19.x, 20.x

Amazon ECS on Fargate

 

 

Amazon ECS on EC2

 

 

Amazon EKS on EC2

 

Table – Container Orchestration Support

 

VM HYPERVISOR SUPPORT

 

Table below provides VM Hypervisor Support information:

 

Hypervisor Type

Support

ESXi

AWS EC2

Nutanix

Table – VM Hypervisor Support

WEB PROTECTION - SUPPORTED APPLICATION SERVER TECHNOLOGIESWEB PROTECTION - SUPPORTED APPLICATION SERVER TECHNOLOGIES

 

SUPPORTED TECHNOLOGIES FOR JAVA

 

The table below lists the supported technologies for Java

 

Technology

Supported Version(s)

Java Versions

  • JDK 1.7
  • JDK 1.8
  • JDK 9
  • JDK 10
  • JDK 11
  • JDK 12
  • JDK 17

Application Servers

  • Tomcat 7, 8, 9
  • JBoss (Standalone) 6.4, 7.2 and 7.4
  • JBoss (Cluster) 7.1
  • Jetty 9
  • IBM WebSphere App Server 8.5, 9
  • Oracle Weblogic 12
  • Wildfly Server (Standalone) 21-26
  • Wildfly Server (Cluster) 10, 11, 12
  • GlassFish 3, 4, 5
  • Executable Jar

Application Framework

  • Spring Web (MVC)
  • Struts 2
  • Hibernate
  • GWT (Google Web Kit) 2.9
  • JSF (Java Server Faces)
  • Spring Boot

Databases

  • MySQL JDBC 5.x
  • Postrgres SQL JDBC 9.x, 42.2.5
  • Oracle JDBC ojdbc8
  • MS-SQL JDBC 8.x
  • H-SQL JDBC 2.x

Table – Java – Supported Technologies

 

SUPPORTED TECHNOLOGIES FOR PHP

 

The table below lists the supported technologies for PHP

 

Technology

Supported Version(s)

Runtime Versions

  • 7.3
  • 7.4

Web Servers

  • Apache with Fork and PHP-FPM 2.4.x
  • NGINX 1.x

Databases

  • MySQL Server 5.x
  • Maria DB Server 10.0.38

Thread Safety Mode

  • NTS (Non-Thread Safe)

Table – PHP – Supported Technologies

 

SUPPORTED TECHNOLOGIES FOR RUBY ON RAILS

 

The table below lists the supported technologies for Ruby on Rails

 

Technology

Supported Version(s)

Language Versions

  • 2.5
  • 2.6

Web Servers

  • Puma 3.11.x+
  • Passenger 6.x
  • Unicorn 5.1.x+

Application Framework

  • Rails

Databases

  • MySQL Server 5.x
  • Postgres 1.x+

Table – Ruby on Rails – Supported Technologies

SUPPORTED TECHNOLOGIES FOR .NET

 

The table below lists the supported technologies for .NET

  

Technology

Supported Version(s)

.NET Framework

Language Versions

  • .Net Framework 4.5.x
  • .Net Framework 4.6.x
  • .Net Framework 4.7.x
  • .Net Framework 4.8.x

Architecture

  • x86
  • x64

Web Servers

  • IIS 8.5+

Managed Pipeline Mode

  • Classic
  • Integrated

Application Framework

  • ASP.NET MVC
  • ASP.NET Web Forms
  • ASP.NET Web Pages
  • ASP.Net WebAPI
  • ASP.Net Web Service (asmx)

Databases

  • MS SQL Server

APM Compatibility

  • AppDynamics
  • New Relic

.NET Core

Language Versions

  • .Net Core 2.2
  • .Net Core 3.0
  • .Net Core 3.1

Architecture

  • x86
  • x64

Web Servers

  • IIS 8.5+

Hosting model

  • In-proc
  • Out-Of-Proc

Application Framework

  • ASP.Net Core
  • ASP.Net Core WebAPI

Databases

  • MS SQL Server

APM Compatibility

  • AppDynamics
  • New Relic

Table – .NET – Supported Technologies

 

SUPPORTED TECHNOLOGIES FOR NODE.JS

 

The table below lists the supported technologies for Node.js

  

Technology

Supported Version(s)

Language Versions

  • 8.17.x
  • 10.x
  • 12.x
  • 14.x

Application Framework

  • Express

Databases

  • MySQL Server 5.x
  • Oracle (oracledb npm: 4.x)
  • MS SQL Server (mssql npm: 4.x)

Table – Node.js – Supported Technologies

 

WEB PROTECTION - SUPPORTED WEB SERVER VERSIONSWEB PROTECTION - SUPPORTED WEB SERVER VERSIONS

 

The table below lists the supported Webserver Versions by VSP-Web - Web Server

 

Operating System

NGINX

Apache

VM

Container

VM

Container

RHEL7

NGINX 1.16

 

Apache 2.4.6  
RHEL8 NGINX 1.14.1

 

 

 
UBUNTU16 NGINX 1.10.3 NGINX 1.10.3 Apache 2.4.18 Apache 2.4.18
UBUNTU18 NGINX 1.14  

 

 
UBUNTU20 NGINX 1.18  

 

 

Table – Supported Webserver Versions

 

WEB PROTECTION - SUPPORTED VULNERABILITIESWEB PROTECTION - SUPPORTED VULNERABILITIES

 

The table below provides the supported vulnerabilities by VSP Web Protection

 

Vulnerability/ Logging

Type

Java

PHP

ROR

Node.js

.NET

Web Protection on Web Server

SQL Injection (SQLi)

Vulnerability

Command Injection (CMDi)

Vulnerability

Path Traversal (PT)

Vulnerability

Local File Inclusion (LFI)

Vulnerability

Remote File Inclusion (RFI)

Vulnerability

Reflected-XSS

Vulnerability

Stored-XSS

Vulnerability

Carriage Return and Line Feed (CRLFi)

Vulnerability

XML Injection

Vulnerability

Custom Injection

Vulnerability

Protocol Enforcement

Vulnerability

DOM-based cross-site scripting (DOM-XSS)

Vulnerability

Cross-site request forgery (CSRF)

Vulnerability

 

Class Load

Logging

Software Exception

Logging

Table – Web Protection – Supported Vulnerabilities

 

XML Injection includes the below vulnerabilities:

  1. XML External Entity - PT/LFI 

  2. XML External Entity - RFI

  3. Malicious input within XML for other supported vulnerability

  4. XML Bomb

 

The table below provides the supported vulnerabilities by VSP Web Protection options for each vulnerability

 

Vulnerability/ Logging

Type

Available Instrumentation

Available Protection Mode

Possible Incident Type

SQL Injection (SQLi)

Vulnerability

HTTP/ DEEP

Protect/ Detect

Threat/ Attack

Command Injection (CMDi)

Vulnerability

HTTP/ DEEP

Protect/ Detect

Attack

Path Traversal (PT)

Vulnerability

HTTP/ DEEP

Protect/ Detect

Threat/ Attack

Local File Inclusion (LFI)

Vulnerability

HTTP/ DEEP

Protect/ Detect

Threat/ Attack

Remote File Inclusion (RFI)

Vulnerability

HTTP/ DEEP

Protect/ Detect

Attack

Reflected-XSS

Vulnerability

DEEP

Protect/ Detect

Threat/ Attack

Stored-XSS

Vulnerability

DEEP

Protect/ Detect

Attack

Carriage Return and Line Feed (CRLFi)

Vulnerability

DEEP

Protect/ Detect

Threat/ Attack

XML Injection (XMLi)

Vulnerability

HTTP/ DEEP

Protect/ Detect

Attack

Custom Injection

Vulnerability

HTTP

Protect/ Detect

Attack

Protocol Enforcement

Vulnerability

HTTP

Protect/ Detect

Attack

DOM-based cross-site scripting (DOM-XSS)

Vulnerability

DEEP

Detect

Attack

Cross-site request forgery (CSRF)

Vulnerability

DEEP

Protect/ Detect

Attack

Class Load

Logging

NA

NA

NA

Software Exception

Logging

NA

NA

NA

Table – Web Protection – Available Options

 

BUFFER EXPLOIT PROTECTION - QUALIFIED APPLICATIONSBUFFER EXPLOIT PROTECTION - QUALIFIED APPLICATIONS

 

  NOTE:

VSP Memory is not supported when Intel® Transactional Synchronization Extensions (Intel® TSX) is enabled

FOR CONTAINERS

 

The table below lists the qualified Applications

 

Operating System

NGINX 1.4

Httpd 2.4

Apache 2

Alpine 3.8

 

 

Alpine 3.10

 

 

Alpine 3.11

 

 

Alpine 3.12

 

Alpine 3.13

 

Debian Stretch Slim

 

 

Debian Buster Slim

 

 

Ubuntu 18.04

 

 

Ubuntu 20.04

 

RHEL 7.6

 

CentOS 7.9

 

Table – Qualified Applications for Containers

FOR VIRTUAL MACHINES

 

The table below lists the qualified Applications

 

Operating System

NGINX 1.4

NGINX 1.2

Httpd 2.4

Apache 2

RHEL 7

 

 

 

CentOS 7.9

 

 

 

Ubuntu 18

 

 

 

Ubuntu 20

 

 

 

AmazonLinux2

 

 

Table – Qualified Applications for VMs

MEMORY EXPLOIT PROTECTION - SUPPORTED KERNEL VERSIONSMEMORY EXPLOIT PROTECTION - SUPPORTED KERNEL VERSIONS

 

Table below provides the supported Kernel versions for Memory Exploit Protection

 

Operating System

Supported Kernel Versions

DEBIAN-9/STRETCH

  • 4.9.0-16-common_debian9

RHEL7.6

  • 3.10.0-123.el7_rhel7.6
  • 3.10.0-957.el7_rhel7.6
  • 3.10.0-1136.el7_rhel7.9
  • 3.10.0-1160.el7_rhel7.9

RHEL8.x

  • 4.18.0-80.el8_rhel8.0
  • 4.18.0-193.el8_rhel8.2
  • 4.18.0-240.el8_rhel8.3
  • 4.18.0-348.el8_rhel8.5

UBUNTU16

  • 4.4.0-131-generic_ubuntu16
  • 4.4.0-210-generic_ubuntu16

UBUNTU18

  • 4.15.0-55-generic_ubuntu18
  • 4.15.0-140-generic_ubuntu18
  • 4.15.0-147-generic_ubuntu18
  • 4.15.0-175-generic_ubuntu18
  • 4.15.0-176-generic_ubuntu18

UBUNTU20

  • 5.4.0-77-generic_ubuntu20
  • 5.4.0-70-generic_ubuntu20
  • 5.4.0-104-generic_ubuntu20
  • 5.4.0-107-generic_ubuntu20
  • 5.4.0-109-generic_ubuntu20
  • 5.4.0-113-generic_ubuntu20
  • 5.8.0-48-generic_ubuntu20

Table – Supported Kernel Versions

 

CMS COMPATIBILITYCMS COMPATIBILITY

 

CMS INSTALLATION – OS COMPATIBILITY

 

The table below provides the Operating System Compatibility for CMS Installation on both VMs and Containers

 

Operating System

VM

Container

Notes

Alpine Linux

 

 

Red Hat Enterprise Linux Server 7.9

 

Docker-compose version 1.29+
Docker version –18.x, 19.x, 20.x
200 GB in /var partition

Red Hat Enterprise Linux Server 8.5

 

Docker-compose version 1.29+
Docker version –18.x, 19.x, 20.x
200 GB in /var partition

Table – CMS Installation – OS Compatibility

 

 

WITH THIRD-PARTY PRODUCTS

 

The table below lists the third-party products that CMS is compatible with

 

Third-Party Product

Notes

LDAP

CMS is compatible with Active Directory only. No other LDAP integration is supported

SAML

Only Okta is supported in SAML

Splunk

Only HTTP is supported and not HTTPS

Zendesk

 

QRadar

 

Email Server

 

Syslog Server

 

Table – CMS Compatibility with Third Party Products