ModSecurity is a plugin for Apache web servers which acts as a web application layer firewall. It is employed to prevent attacks against script-driven websites by using security rules that contain specific expressions. That way, the firewall can stop hacking and spamming attempts and shield even Internet sites that aren't updated often. As an example, several unsuccessful login attempts to a script administrator area or attempts to execute a certain file with the intention to get access to the script shall trigger particular rules, so ModSecurity will stop these activities the instant it discovers them. The firewall is very efficient since it screens the whole HTTP traffic to a site in real time without slowing it down, so it could stop an attack before any harm is done. It additionally keeps an exceptionally detailed log of all attack attempts that includes more information than typical Apache logs, so you could later analyze the data and take additional measures to increase the security of your Internet sites if required.

ModSecurity in Hosting

ModSecurity is offered with every hosting solution which we offer and it's turned on by default for every domain or subdomain which you include through your Hepsia Control Panel. In case it interferes with any of your apps or you would like to disable it for any reason, you shall be able to achieve that through the ModSecurity section of Hepsia with only a mouse click. You can also activate a passive mode, so the firewall will detect potential attacks and maintain a log, but shall not take any action. You'll be able to see detailed logs in the very same section, including the IP where the attack came from, what precisely the attacker aimed to do and at what time, what ModSecurity did, etc. For optimum security of our customers we use a collection of commercial firewall rules mixed with custom ones that are added by our system admins.

ModSecurity in Semi-dedicated Servers

Any web application you install inside your new semi-dedicated server account shall be protected by ModSecurity because the firewall is included with all our hosting solutions and is activated by default for any domain and subdomain that you include or create using your Hepsia hosting CP. You'll be able to manage ModSecurity through a dedicated section in Hepsia where not simply could you activate or deactivate it fully, but you could also switch on a passive mode, so the firewall won't block anything, but it shall still maintain a record of possible attacks. This normally requires just a mouse click and you shall be able to look at the logs no matter if ModSecurity is in passive or active mode through the same section - what the attack was and where it originated from, how it was handled, etcetera. The firewall uses two groups of rules on our servers - a commercial one which we get from a third-party web security provider and a custom one that our admins update personally as to respond to newly discovered risks as soon as possible.

ModSecurity in VPS Servers

All VPS servers which are set up with the Hepsia Control Panel come with ModSecurity. The firewall is installed and switched on by default for all domains which are hosted on the server, so there shall not be anything special that you'll need to do to protect your Internet sites. It'll take you only a mouse click to stop ModSecurity if required or to activate its passive mode so that it records what happens without taking any measures to stop intrusions. You'll be able to look at the logs created in active or passive mode through the corresponding section of Hepsia and learn more about the type of the attack, where it originated from, what rule the firewall employed to tackle it, and so forth. We use a mix of commercial and custom rules in order to make certain that ModSecurity shall block out as many threats as possible, hence increasing the protection of your web programs as much as possible.

ModSecurity in Dedicated Servers

If you opt to host your sites on a dedicated server with the Hepsia CP, your web applications shall be secured right from the start because ModSecurity is supplied with all Hepsia-based packages. You'll be able to manage the firewall effortlessly and if required, you'll be able to turn it off or enable its passive mode when it'll only keep a log of what's taking place without taking any action to prevent potential attacks. The logs which you can find within the exact same section of the Control Panel are very detailed and include details about the attacker IP, what website and file were attacked and in what ways, what rule the firewall used to stop the intrusion, etc. This data shall enable you to take measures and boost the protection of your websites even more. To be on the safe side, we use not just commercial rules, but also custom-made ones that our administrators include whenever they identify attacks that have not yet been included inside the commercial pack.