Skip to main content

Getting Started with Self-Hosted Repository Firewall

Nexus Repository ProNexus Repository Pro+Repository FirewallSelf-Hosted

Use this page to connect your Nexus Repository self-hosted instance to Repository Firewall. If you use a Sonatype cloud instance, see Getting Started with Repository Firewall Cloud.

Repository Firewall is a set of features, powered by IQ Server, that integrate with Nexus Repository or through a plugin with JFrog Artifactory.

Depending on your Nexus Repository edition, Repository Firewall capabilities are available through the following options:

  • Nexus Repository Pro+: Repository Firewall capabilities are unlocked using your Pro+ license file. You must connect your Nexus Repository instance to a Sonatype IQ Server running release 208 or higher and apply your Pro+ license to the IQ instance.

  • Nexus Repository Pro: Repository Firewall capabilities are supported by connecting your Nexus Repository instance to an external Sonatype Firewall license.

Configure the Repository Firewall with the following steps:

  1. Install IQ Server. See Install self-hosted IQ Server for more details.

  2. Add the Repository Firewall license. Nexus Repository Pro+ users can use the Nexus Repository Pro+ license with IQ Server 208 or later.

  3. Connect your artifact repository to the IQ Server instance.

  4. Select your repositories to be protected by the Repository Firewall.

  5. Configure your policies to quarantine new violating components and protect against introducing risk.

  6. Inform your development teams of the change to set expectations.

To configure Nexus Repository, review the Repository Firewall Capability

Connect to an Artifact Repository

Your Repository Firewall license supports either Nexus Repository or JFrog Artifactory.

  • Nexus Repository

    Repository Firewall currently works with Nexus Repository Cloud and Pro editions.

    To use Repository Firewall with Nexus Repository, customers must configure Nexus Repository to connect to an IQ Server instance that has a valid Repository Firewall license.

    See Nexus Repository 3 Pro Setup

  • JFrog Artifactory

    For JFrog Artifactory you are required to install and manage the Repository Firewall for Artifactory plugin to enable the functionality. Note that Artifactory SaaS is not supported.

    See JFrog Artifactory Setup

Review the Repository Audit

Once enabled, the Repository Firewall begins to audit repositories for open-source threats and generate a report of the current risk.

Tip

Components currently in your artifact repository are not quarantined; there is no disruption to your existing builds and deployments.

Learn more about the Repository Results View.