ModSecurity is a potent web application layer firewall for Apache web servers. It monitors the entire HTTP traffic to a site without affecting its overall performance and in case it identifies an intrusion attempt, it prevents it. The firewall furthermore keeps a more comprehensive log for the traffic than any web server does, so you'll manage to keep an eye on what is happening with your Internet sites a lot better than if you rely merely on standard logs. ModSecurity employs security rules based on which it helps prevent attacks. For instance, it detects if anyone is trying to log in to the administrator area of a particular script multiple times or if a request is sent to execute a file with a certain command. In these circumstances these attempts trigger the corresponding rules and the firewall program blocks the attempts right away, then records in-depth info about them inside its logs. ModSecurity is among the best software firewalls available and it can easily protect your web apps against many threats and vulnerabilities, especially if you don’t update them or their plugins often.

ModSecurity in Website Hosting

ModSecurity can be found with every website hosting solution which we offer and it is switched on by default for every domain or subdomain that you add through your Hepsia CP. In the event that it interferes with any of your apps or you would like to disable it for whatever reason, you shall be able to achieve that through the ModSecurity section of Hepsia with simply a mouse click. You can also use a passive mode, so the firewall will discover potential attacks and keep a log, but won't take any action. You could view extensive logs in the very same section, including the IP where the attack came from, what exactly the attacker attempted to do and at what time, what ModSecurity did, etcetera. For optimum safety of our customers we use a set of commercial firewall rules mixed with custom ones that are added by our system administrators.

ModSecurity in Semi-dedicated Hosting

ModSecurity is a part of our semi-dedicated hosting plans and if you decide to host your websites with our company, there won't be anything special you'll need to do given that the firewall is switched on by default for all domains and subdomains which you include using your hosting Control Panel. If required, you can disable ModSecurity for a particular site or switch on the so-called detection mode in which case the firewall shall still work and record data, but shall not do anything to prevent potential attacks on your sites. Comprehensive logs will be readily available inside your CP and you shall be able to see which kind of attacks happened, what security rules were triggered and how the firewall addressed the threats, what IP addresses the attacks originated from, etc. We use 2 kinds of rules on our servers - commercial ones from a company which operates in the field of web security, and customized ones which our administrators occasionally add to respond to newly discovered risks on time.

ModSecurity in VPS Web Hosting

ModSecurity is pre-installed on all virtual private servers which are offered with the Hepsia hosting Control Panel, so your web apps will be protected from the instant your server is in a position. The firewall is turned on by default for any domain or subdomain on the Virtual Private Server, but if necessary, you can disable it with a click via the corresponding section of Hepsia. You could also set it to function in detection mode, so it will keep a detailed log of any possible attacks without taking any action to prevent them. The logs can be found in the very same section and include details about the nature of the attack, what IP it originated from and what ModSecurity rule was initiated to stop it. For optimum security, we use not only commercial rules from a firm working in the field of web security, but also custom ones that our admins add personally in order to react to new threats which are still not tackled in the commercial rules.

ModSecurity in Dedicated Servers Hosting

ModSecurity is included with all dedicated servers which are set up with our Hepsia Control Panel and you'll not have to do anything specific on your end to employ it because it is turned on by default each time you include a new domain or subdomain on your hosting server. In the event that it interferes with any of your apps, you'll be able to stop it via the respective area of Hepsia, or you could leave it operating in passive mode, so it shall recognize attacks and shall still keep a log for them, but shall not prevent them. You may look at the logs later to learn what you can do to enhance the protection of your Internet sites as you will find information such as where an intrusion attempt came from, what website was attacked and based on what rule ModSecurity responded, etc. The rules that we employ are commercial, thus they're regularly updated by a security provider, but to be on the safe side, our staff also add custom rules every now and then as to deal with any new threats they have discovered.