ModSecurity is a powerful web app layer firewall for Apache web servers. It monitors the entire HTTP traffic to a website without affecting its overall performance and when it identifies an intrusion attempt, it blocks it. The firewall additionally keeps a more comprehensive log for the traffic than any server does, so you'll manage to keep an eye on what is happening with your sites a lot better than if you rely merely on standard logs. ModSecurity uses security rules based on which it prevents attacks. For instance, it recognizes whether somebody is trying to log in to the administration area of a particular script several times or if a request is sent to execute a file with a specific command. In such situations these attempts set off the corresponding rules and the firewall hinders the attempts right away, and then records detailed information about them inside its logs. ModSecurity is among the most effective software firewalls out there and it can easily protect your web apps against many threats and vulnerabilities, especially if you don’t update them or their plugins often.

ModSecurity in Web Hosting

We offer ModSecurity with all web hosting solutions, so your Internet applications will be shielded from malicious attacks. The firewall is activated as standard for all domains and subdomains, but if you would like, you shall be able to stop it via the respective section of your Hepsia Control Panel. You could also activate a detection mode, so ModSecurity will keep a log as intended, but won't take any action. The logs that you will discover in Hepsia are extremely detailed and feature data about the nature of any attack, when it took place and from what IP, the firewall rule that was triggered, and so on. We employ a group of commercial rules which are regularly updated, but sometimes our admins include custom rules as well so as to efficiently protect the Internet sites hosted on our servers.

ModSecurity in Semi-dedicated Servers

All semi-dedicated server plans that we offer include ModSecurity and since the firewall is enabled by default, any site which you set up under a domain or a subdomain will be secured right from the start. An individual section inside the Hepsia Control Panel that comes with the semi-dedicated accounts is dedicated to ModSecurity and it shall permit you to stop and start the firewall for any website or switch on a detection mode. With the last mentioned, ModSecurity won't take any action, but it shall still identify possible attacks and will keep all data within a log as if it were fully active. The logs can be found within the very same section of the Control Panel and they feature info about the IP where an attack originated from, what its nature was, what rule ModSecurity applies to recognize and stop it, etcetera. The security rules we employ on our web servers are a mix between commercial ones from a security firm and custom ones developed by our system administrators. Consequently, we offer greater security for your web programs as we can shield them from attacks even before security businesses release updates for new threats.

ModSecurity in VPS Servers

All VPS servers which are provided with the Hepsia CP feature ModSecurity. The firewall is set up and turned on by default for all domains which are hosted on the machine, so there shall not be anything special which you shall have to do to protect your Internet sites. It shall take you simply a mouse click to stop ModSecurity if needed or to switch on its passive mode so that it records what occurs without taking any actions to stop intrusions. You will be able to look at the logs generated in active or passive mode via the corresponding section of Hepsia and discover more about the type of the attack, where it came from, what rule the firewall used to deal with it, etcetera. We employ a combination of commercial and custom rules in order to make certain that ModSecurity will block as many risks as possible, consequently increasing the security of your web apps as much as possible.

ModSecurity in Dedicated Servers

ModSecurity is offered as standard with all dedicated servers that are set up with the Hepsia Control Panel and is set to “Active” automatically for any domain you host or subdomain that you create on the server. Just in case that a web app doesn't function properly, you could either disable the firewall or set it to operate in passive mode. The latter means that ModSecurity shall maintain a log of any potential attack which might take place, but won't take any action to stop it. The logs created in passive or active mode will offer you more details about the exact file which was attacked, the nature of the attack and the IP address it originated from, etc. This data will allow you to decide what actions you can take to boost the security of your sites, including blocking IPs or performing script and plugin updates. The ModSecurity rules which we employ are updated constantly with a commercial package from a third-party security enterprise we work with, but oftentimes our admins add their own rules also when they identify a new potential threat.