ModSecurity is a highly effective web application layer firewall for Apache web servers. It monitors the entire HTTP traffic to a site without affecting its operation and when it identifies an intrusion attempt, it prevents it. The firewall additionally keeps a more thorough log for the website visitors than any web server does, so you shall manage to keep an eye on what's going on with your websites better than if you rely merely on conventional logs. ModSecurity employs security rules based on which it helps prevent attacks. For instance, it identifies if somebody is trying to log in to the admin area of a particular script several times or if a request is sent to execute a file with a particular command. In such cases these attempts set off the corresponding rules and the firewall software blocks the attempts immediately, then records comprehensive info about them within its logs. ModSecurity is among the most effective software firewalls available and it can protect your web applications against many threats and vulnerabilities, especially in case you don’t update them or their plugins often.

ModSecurity in Hosting

We offer ModSecurity with all hosting packages, so your web applications shall be protected against malicious attacks. The firewall is switched on by default for all domains and subdomains, but if you would like, you will be able to stop it through the respective area of your Hepsia Control Panel. You could also switch on a detection mode, so ModSecurity will keep a log as intended, but shall not take any action. The logs that you'll find in Hepsia are very detailed and feature information about the nature of any attack, when it took place and from what IP address, the firewall rule that was triggered, etcetera. We use a set of commercial rules which are often updated, but sometimes our administrators add custom rules as well so as to efficiently protect the websites hosted on our servers.

ModSecurity in Semi-dedicated Servers

ModSecurity is part of our semi-dedicated server packages and if you choose to host your Internet sites with us, there will not be anything special you'll have to do as the firewall is activated by default for all domains and subdomains you add using your hosting CP. If required, you could disable ModSecurity for a certain Internet site or turn on the so-called detection mode in which case the firewall shall still function and record data, but won't do anything to prevent potential attacks against your sites. Comprehensive logs will be available inside your Control Panel and you'll be able to see which kind of attacks occurred, what security rules were triggered and how the firewall handled the threats, what IP addresses the attacks came from, etcetera. We employ 2 types of rules on our servers - commercial ones from a business which operates in the field of web security, and custom made ones which our admins occasionally add to respond to newly discovered threats promptly.

ModSecurity in VPS Servers

All VPS servers that are offered with the Hepsia CP come with ModSecurity. The firewall is set up and turned on by default for all domains which are hosted on the web server, so there shall not be anything special which you shall have to do to protect your websites. It'll take you just a mouse click to stop ModSecurity if required or to activate its passive mode so that it records what happens without taking any measures to stop intrusions. You shall be able to see the logs generated in passive or active mode via the corresponding section of Hepsia and learn more about the type of the attack, where it came from, what rule the firewall used to deal with it, and so forth. We use a mixture of commercial and custom rules in order to make sure that ModSecurity will prevent as many threats as possible, consequently enhancing the security of your web applications as much as possible.

ModSecurity in Dedicated Servers

When you opt to host your Internet sites on a dedicated server with the Hepsia CP, your web applications shall be protected immediately because ModSecurity is available with all Hepsia-based plans. You shall be able to control the firewall without difficulty and if necessary, you shall be able to turn it off or activate its passive mode when it'll only keep a log of what's going on without taking any action to prevent possible attacks. The logs that you'll find within the exact same section of the CP are quite detailed and include information about the attacker IP, what website and file were attacked and in what way, what rule the firewall used to prevent the intrusion, etcetera. This data will allow you to take measures and increase the protection of your Internet sites even more. To be on the safe side, we use not only commercial rules, but also custom-made ones that our admins add every time they recognize attacks that have not yet been included inside the commercial pack.