ModSecurity is a plugin for Apache web servers that acts as a web app layer firewall. It's used to prevent attacks against script-driven websites through the use of security rules that contain specific expressions. In this way, the firewall can block hacking and spamming attempts and preserve even Internet sites that aren't updated often. For example, multiple unsuccessful login attempts to a script admin area or attempts to execute a specific file with the purpose to get access to the script will trigger specific rules, so ModSecurity shall block out these activities the second it identifies them. The firewall is incredibly efficient since it screens the whole HTTP traffic to an Internet site in real time without slowing it down, so it can stop an attack before any damage is done. It furthermore keeps an incredibly comprehensive log of all attack attempts that contains more info than typical Apache logs, so you could later check out the data and take further measures to increase the security of your websites if required.

ModSecurity in Cloud Hosting

ModSecurity comes by default with all cloud hosting solutions that we supply and it'll be turned on automatically for any domain or subdomain which you add/create within your Hepsia hosting CP. The firewall has three different modes, so you'll be able to switch on and disable it with just a mouse click or set it to detection mode, so it will keep a log of all attacks, but it will not do anything to stop them. The log for any of your websites shall contain detailed info which includes the nature of the attack, where it originated from, what action was taken by ModSecurity, etc. The firewall rules that we use are regularly updated and comprise of both commercial ones that we get from a third-party security firm and custom ones which our system administrators add in the event that they detect a new type of attacks. In this way, the sites which you host here shall be far more protected without any action needed on your end.

ModSecurity in Semi-dedicated Servers

Any web app which you install inside your new semi-dedicated server account shall be protected by ModSecurity since the firewall comes with all our hosting solutions and is turned on by default for any domain and subdomain which you add or create using your Hepsia hosting Control Panel. You shall be able to manage ModSecurity through a dedicated area in Hepsia where not simply could you activate or deactivate it fully, but you could also activate a passive mode, so the firewall shall not stop anything, but it'll still keep a record of possible attacks. This takes simply a mouse click and you shall be able to view the logs regardless if ModSecurity is in active or passive mode through the same section - what the attack was and where it originated from, how it was handled, etc. The firewall employs two sets of rules on our machines - a commercial one that we get from a third-party web security provider and a custom one which our admins update manually as to respond to recently discovered threats immediately.

ModSecurity in VPS Servers

ModSecurity is included with all Hepsia-based VPS servers we offer and it'll be turned on automatically for any new domain or subdomain which you include on the hosting server. That way, any web app you install shall be secured right from the start without doing anything personally on your end. The firewall can be managed from the section of the Control Panel which bears the same name. This is the place whereyou could switch off ModSecurity or enable its passive mode, so it shall not take any action toward threats, but shall still keep a detailed log. The recorded info is available inside the same section as well and you will be able to see what IPs any attacks came from so that you can block them, what the nature of the attempted attacks was and based on what security rules ModSecurity reacted. The rules we employ on our servers are a combination between commercial ones we obtain from a security organization and custom ones which are included by our staff to enhance the protection of any web apps hosted on our end.

ModSecurity in Dedicated Servers

ModSecurity is available as standard with all dedicated servers which are set up with the Hepsia CP and is set to “Active” automatically for any domain which you host or subdomain which you create on the hosting server. In the event that a web app does not function correctly, you could either turn off the firewall or set it to function in passive mode. The latter means that ModSecurity shall maintain a log of any possible attack which could happen, but won't take any action to stop it. The logs created in active or passive mode shall present you with additional details about the exact file that was attacked, the form of the attack and the IP address it originated from, etc. This information shall allow you to determine what steps you can take to enhance the safety of your Internet sites, for instance blocking IPs or performing script and plugin updates. The ModSecurity rules we employ are updated constantly with a commercial pack from a third-party security company we work with, but from time to time our admins add their own rules also if they come across a new potential threat.