ModSecurity is an effective firewall for Apache web servers that is used to stop attacks towards web apps. It monitors the HTTP traffic to a specific website in real time and prevents any intrusion attempts the instant it identifies them. The firewall uses a set of rules to accomplish that - as an example, trying to log in to a script admin area unsuccessfully several times activates one rule, sending a request to execute a specific file that may result in gaining access to the Internet site triggers another rule, etc. ModSecurity is amongst the best firewalls available on the market and it will preserve even scripts that are not updated often as it can prevent attackers from employing known exploits and security holes. Incredibly detailed data about every intrusion attempt is recorded and the logs the firewall keeps are much more specific than the regular logs provided by the Apache server, so you may later analyze them and decide whether you need to take additional measures in order to boost the security of your script-driven sites.

ModSecurity in Shared Hosting

ModSecurity is offered with every single shared hosting package that we provide and it's activated by default for every domain or subdomain which you include via your Hepsia CP. In case it interferes with any of your apps or you'd like to disable it for any reason, you will be able to accomplish that through the ModSecurity section of Hepsia with merely a mouse click. You can also activate a passive mode, so the firewall will discover potential attacks and maintain a log, but won't take any action. You'll be able to view comprehensive logs in the exact same section, including the IP where the attack originated from, what precisely the attacker tried to do and at what time, what ModSecurity did, etc. For max protection of our clients we use a set of commercial firewall rules combined with custom ones which are added by our system admins.

ModSecurity in Semi-dedicated Hosting

We've integrated ModSecurity by default in all semi-dedicated hosting packages, so your web applications shall be protected the instant you install them under any domain or subdomain. The Hepsia CP that is included with the semi-dedicated accounts shall permit you to activate or disable the firewall for any site with a click. You will also be able to switch on a passive detection mode with which ModSecurity shall maintain a log of possible attacks without really preventing them. The thorough logs include things like the nature of the attack and what ModSecurity response that attack triggered, where it came from, etcetera. The list of rules that we employ is frequently updated as to match any new threats that could appear on the Internet and it consists of both commercial rules that we get from a security corporation and custom-written ones that our admins include in the event that they discover a threat that's not present in the commercial list yet.

ModSecurity in VPS

ModSecurity is included with all Hepsia-based virtual private servers we offer and it'll be switched on automatically for any new domain or subdomain which you include on the machine. This way, any web app you install shall be protected right from the start without doing anything personally on your end. The firewall may be handled via the section of the Control Panel which has the same name. This is the location whereyou'll be able to turn off ModSecurity or let its passive mode, so it will not take any action against threats, but shall still keep a thorough log. The recorded data is available in the same area as well and you shall be able to see what IPs any attacks originated from so that you can block them, what the nature of the attempted attacks was and based upon what security rules ModSecurity responded. The rules we use on our servers are a mixture between commercial ones that we get from a security company and custom ones which are added by our administrators to improve the security of any web applications hosted on our end.

ModSecurity in Dedicated Hosting

When you opt to host your websites on a dedicated server with the Hepsia Control Panel, your web programs shall be secured right away since ModSecurity is available with all Hepsia-based packages. You will be able to regulate the firewall with ease and if necessary, you shall be able to turn it off or switch on its passive mode when it shall only keep a log of what is occurring without taking any action to stop potential attacks. The logs which you can find inside the same section of the CP are really detailed and include info about the attacker IP address, what website and file were attacked and in what way, what rule the firewall employed to prevent the intrusion, and so forth. This info will permit you to take measures and increase the security of your Internet sites even more. To be on the safe side, we employ not only commercial rules, but also custom-made ones that our admins add when they identify attacks which haven't yet been included inside the commercial pack.