ModSecurity in Website Hosting
ModSecurity can be found with each and every website hosting solution which we provide and it is switched on by default for any domain or subdomain that you include through your Hepsia CP. In case it interferes with any of your applications or you'd like to disable it for whatever reason, you shall be able to do that through the ModSecurity section of Hepsia with only a click. You can also activate a passive mode, so the firewall will detect potential attacks and maintain a log, but will not take any action. You could view detailed logs in the exact same section, including the IP where the attack originated from, what precisely the attacker attempted to do and at what time, what ModSecurity did, and so forth. For optimum protection of our customers we use a group of commercial firewall rules mixed with custom ones that are provided by our system admins.
ModSecurity in Semi-dedicated Servers
We have incorporated ModSecurity by default in all semi-dedicated server packages, so your web applications shall be protected the instant you install them under any domain or subdomain. The Hepsia Control Panel which comes with the semi-dedicated accounts shall permit you to enable or turn off the firewall for any Internet site with a click. You will also have the ability to activate a passive detection mode with which ModSecurity shall maintain a log of potential attacks without actually preventing them. The comprehensive logs include things like the nature of the attack and what ModSecurity response that attack generated, where it came from, etcetera. The list of rules which we use is frequently updated in order to match any new risks which might appear on the Internet and it includes both commercial rules that we get from a security business and custom-written ones that our administrators add in the event that they find a threat that's not present within the commercial list yet.
ModSecurity in VPS Servers
All VPS servers which are offered with the Hepsia Control Panel include ModSecurity. The firewall is set up and switched on by default for all domains which are hosted on the server, so there won't be anything special which you'll need to do to protect your Internet sites. It'll take you only a mouse click to stop ModSecurity if needed or to turn on its passive mode so that it records what goes on without taking any steps to stop intrusions. You'll be able to look at the logs created in active or passive mode via the corresponding section of Hepsia and find out more about the type of the attack, where it came from, what rule the firewall employed to tackle it, and so forth. We employ a mixture of commercial and custom rules in order to make certain that ModSecurity shall block as many risks as possible, therefore enhancing the security of your web programs as much as possible.
ModSecurity in Dedicated Servers
ModSecurity is offered as standard with all dedicated servers which are set up with the Hepsia CP and is set to “Active” automatically for any domain that you host or subdomain that you create on the web server. Just in case that a web app doesn't operate correctly, you may either turn off the firewall or set it to work in passive mode. The latter means that ModSecurity will maintain a log of any potential attack which could happen, but shall not take any action to stop it. The logs produced in passive or active mode will give you additional details about the exact file that was attacked, the nature of the attack and the IP it came from, etcetera. This information will enable you to choose what measures you can take to improve the security of your Internet sites, including blocking IPs or carrying out script and plugin updates. The ModSecurity rules that we employ are updated regularly with a commercial bundle from a third-party security enterprise we work with, but sometimes our staff include their own rules as well when they discover a new potential threat.