ModSecurity is a powerful web application layer firewall for Apache web servers. It monitors the whole HTTP traffic to a site without affecting its operation and if it identifies an intrusion attempt, it blocks it. The firewall furthermore keeps a more comprehensive log for the site visitors than any server does, so you'll manage to keep track of what's going on with your Internet sites better than if you rely simply on conventional logs. ModSecurity uses security rules based on which it prevents attacks. For instance, it identifies whether somebody is trying to log in to the administration area of a specific script multiple times or if a request is sent to execute a file with a specific command. In such circumstances these attempts set off the corresponding rules and the firewall program blocks the attempts right away, then records detailed info about them in its logs. ModSecurity is among the best software firewalls on the market and it could easily protect your web applications against many threats and vulnerabilities, especially in case you don’t update them or their plugins regularly.

ModSecurity in Shared Website Hosting

We provide ModSecurity with all shared website hosting solutions, so your web apps shall be protected against malicious attacks. The firewall is activated by default for all domains and subdomains, but if you would like, you'll be able to stop it via the respective part of your Hepsia CP. You can also switch on a detection mode, so ModSecurity shall keep a log as intended, but shall not take any action. The logs which you shall discover inside Hepsia are quite detailed and feature info about the nature of any attack, when it happened and from what IP, the firewall rule which was triggered, etc. We use a set of commercial rules which are frequently updated, but sometimes our administrators add custom rules as well so as to better protect the sites hosted on our machines.

ModSecurity in Semi-dedicated Servers

Any web app that you set up inside your new semi-dedicated server account will be protected by ModSecurity as the firewall is included with all our hosting plans and is turned on by default for any domain and subdomain which you include or create via your Hepsia hosting CP. You shall be able to manage ModSecurity via a dedicated section within Hepsia where not only could you activate or deactivate it entirely, but you could also enable a passive mode, so the firewall shall not block anything, but it will still maintain a record of possible attacks. This takes simply a mouse click and you will be able to view the logs regardless if ModSecurity is in active or passive mode through the same section - what the attack was and where it originated from, how it was handled, and so forth. The firewall uses two sets of rules on our servers - a commercial one that we get from a third-party web security company and a custom one that our admins update personally as to respond to recently discovered threats at the earliest opportunity.

ModSecurity in VPS Servers

All VPS servers which are provided with the Hepsia CP include ModSecurity. The firewall is installed and turned on by default for all domains which are hosted on the web server, so there won't be anything special that you'll have to do to protect your sites. It'll take you just a mouse click to stop ModSecurity if necessary or to activate its passive mode so that it records what occurs without taking any steps to prevent intrusions. You'll be able to view the logs produced in passive or active mode from the corresponding section of Hepsia and find out more about the type of the attack, where it came from, what rule the firewall employed to handle it, and so on. We employ a mix of commercial and custom rules so as to make sure that ModSecurity shall stop as many threats as possible, hence boosting the protection of your web programs as much as possible.

ModSecurity in Dedicated Servers

When you decide to host your websites on a dedicated server with the Hepsia Control Panel, your web apps shall be protected right from the start as ModSecurity is available with all Hepsia-based plans. You'll be able to manage the firewall with ease and if necessary, you shall be able to turn it off or activate its passive mode when it will only keep a log of what is taking place without taking any action to stop potential attacks. The logs that you will find in the same section of the CP are incredibly detailed and contain details about the attacker IP, what website and file were attacked and in what way, what rule the firewall used to prevent the intrusion, and so on. This data shall permit you to take measures and improve the protection of your Internet sites even more. To be on the safe side, we use not only commercial rules, but also custom-made ones which our administrators add every time they recognize attacks which have not yet been included within the commercial pack.