ModSecurity is an effective firewall for Apache web servers which is used to stop attacks towards web apps. It monitors the HTTP traffic to a particular Internet site in real time and stops any intrusion attempts the instant it identifies them. The firewall uses a set of rules to accomplish that - for instance, attempting to log in to a script admin area without success a few times sets off one rule, sending a request to execute a specific file that may result in gaining access to the website triggers another rule, and so forth. ModSecurity is one of the best firewalls out there and it will secure even scripts that aren't updated often since it can prevent attackers from using known exploits and security holes. Very detailed info about every single intrusion attempt is recorded and the logs the firewall keeps are much more detailed than the standard logs generated by the Apache server, so you may later analyze them and decide whether you need to take more measures in order to boost the security of your script-driven Internet sites.

ModSecurity in Website Hosting

ModSecurity can be found with each and every website hosting solution which we provide and it is switched on by default for any domain or subdomain that you include through your Hepsia CP. In case it interferes with any of your applications or you'd like to disable it for whatever reason, you shall be able to do that through the ModSecurity section of Hepsia with only a click. You can also activate a passive mode, so the firewall will detect potential attacks and maintain a log, but will not take any action. You could view detailed logs in the exact same section, including the IP where the attack originated from, what precisely the attacker attempted to do and at what time, what ModSecurity did, and so forth. For optimum protection of our customers we use a group of commercial firewall rules mixed with custom ones that are provided by our system admins.

ModSecurity in Semi-dedicated Servers

We have incorporated ModSecurity by default in all semi-dedicated server packages, so your web applications shall be protected the instant you install them under any domain or subdomain. The Hepsia Control Panel which comes with the semi-dedicated accounts shall permit you to enable or turn off the firewall for any Internet site with a click. You will also have the ability to activate a passive detection mode with which ModSecurity shall maintain a log of potential attacks without actually preventing them. The comprehensive logs include things like the nature of the attack and what ModSecurity response that attack generated, where it came from, etcetera. The list of rules which we use is frequently updated in order to match any new risks which might appear on the Internet and it includes both commercial rules that we get from a security business and custom-written ones that our administrators add in the event that they find a threat that's not present within the commercial list yet.

ModSecurity in VPS Servers

All VPS servers which are offered with the Hepsia Control Panel include ModSecurity. The firewall is set up and switched on by default for all domains which are hosted on the server, so there won't be anything special which you'll need to do to protect your Internet sites. It'll take you only a mouse click to stop ModSecurity if needed or to turn on its passive mode so that it records what goes on without taking any steps to stop intrusions. You'll be able to look at the logs created in active or passive mode via the corresponding section of Hepsia and find out more about the type of the attack, where it came from, what rule the firewall employed to tackle it, and so forth. We employ a mixture of commercial and custom rules in order to make certain that ModSecurity shall block as many risks as possible, therefore enhancing the security of your web programs as much as possible.

ModSecurity in Dedicated Servers

ModSecurity is offered as standard with all dedicated servers which are set up with the Hepsia CP and is set to “Active” automatically for any domain that you host or subdomain that you create on the web server. Just in case that a web app doesn't operate correctly, you may either turn off the firewall or set it to work in passive mode. The latter means that ModSecurity will maintain a log of any potential attack which could happen, but shall not take any action to stop it. The logs produced in passive or active mode will give you additional details about the exact file that was attacked, the nature of the attack and the IP it came from, etcetera. This information will enable you to choose what measures you can take to improve the security of your Internet sites, including blocking IPs or carrying out script and plugin updates. The ModSecurity rules that we employ are updated regularly with a commercial bundle from a third-party security enterprise we work with, but sometimes our staff include their own rules as well when they discover a new potential threat.