# Using Kong Konnect (Kong only)

{% hint style="warning" %}
The new Kong integration using Lua-based attachment plugin for the open-appsec integration is currently in beta. This also applies to the new Kong Konnect schema allowing you to manage this plugin directly from Kong Konnect web UI.
{% endhint %}

### Learn how to activate and configure the open-appsec WAF attachment plugin for Kong from Kong Konnect, Kong's central management web UI

If you are using open-appsec WAF integrated with Kong using the modern, Lua-based plugin (not the classical open-appsec attachment plugin, which integrates on NGINX level), then you can also activate and manage the open-appsec attachment plugin for Kong from Kong Konnect.

{% hint style="warning" %}
While Kong Konnect can be used to activate and manage the Lua-based open-appsec attachment plugin, note that you will continue to manage open-appsec in the usual ways, with local, declarative configuration or by using the [open-appsec web UI](https://my.openappsec.io/).
{% endhint %}

1. **Download the Kong Konnect schema** for the open-appsec attachment plugin:

```bash
wget https://raw.githubusercontent.com/openappsec/attachment/main/attachments/kong/plugins/open-appsec-waf-kong-plugin/schema.lua
```

2. **Login to your Kong Konnect web UI**
3. **Upload the schema file** `schema.lua` for the open-appsec-waf-kong-plugin

<figure><img src="https://1225393248-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FNcZmX14M2KdTBrq9EOnI%2Fuploads%2F88BARM89iMNJFVFB383u%2Fimage.png?alt=media&#x26;token=ec9ec4a1-c2c7-4b2a-be16-a112dc72bff7" alt="" width="563"><figcaption></figcaption></figure>

<figure><img src="https://1225393248-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FNcZmX14M2KdTBrq9EOnI%2Fuploads%2FXwrC03QPGUPkpUxiYffX%2Fimage.png?alt=media&#x26;token=5bfd1664-affa-4262-8ad5-46cb773c98fd" alt="" width="563"><figcaption></figcaption></figure>

Now you should see the open-appsec-waf-kong-plugin listed under "Custom Plugins" in Kong Konnect.

<figure><img src="https://1225393248-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FNcZmX14M2KdTBrq9EOnI%2Fuploads%2FvP6cLCE7trZDBjyg4DGI%2Fimage.png?alt=media&#x26;token=6c7aceda-ed63-4c6e-920b-d2731a4681c7" alt="" width="547"><figcaption></figcaption></figure>

4. **Activate the plugin** in the Kong Konnect web UI by selecting "Enable", then you get to this screen:

<figure><img src="https://1225393248-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FNcZmX14M2KdTBrq9EOnI%2Fuploads%2FAtDTFBVGZvF4Fiu9j4fD%2Fimage.png?alt=media&#x26;token=2a786ebe-0745-4caf-a3b4-b141e2772ada" alt="" width="563"><figcaption></figcaption></figure>

Once enabled, the plugin is configured to be applied in "Global" mode by default, which means it will send all traffic to the open-appsec agent for security inspection, alternatively you can select "Scoped" mode here and apply open-appsec security inspection in a custom way only to e.g. to a selected Gateway Service, Route, Consumer or Consumer Group:

<figure><img src="https://1225393248-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FNcZmX14M2KdTBrq9EOnI%2Fuploads%2FxEZHpdQGqWJPwkdiNF7z%2Fimage.png?alt=media&#x26;token=b616a01a-dd4a-4cf8-9f0e-4036c8d4a7b9" alt="" width="563"><figcaption></figcaption></figure>

For more info on how to use Kong Konnect, see also the official docs available here: <https://developer.konghq.com/konnect/>