ModSecurity is a plugin for Apache web servers which acts as a web application layer firewall. It's employed to stop attacks against script-driven sites by employing security rules which contain certain expressions. In this way, the firewall can prevent hacking and spamming attempts and protect even Internet sites that aren't updated frequently. For example, numerous unsuccessful login attempts to a script administrator area or attempts to execute a particular file with the intention to get access to the script shall trigger specific rules, so ModSecurity will block out these activities the minute it discovers them. The firewall is incredibly efficient as it screens the entire HTTP traffic to an Internet site in real time without slowing it down, so it will be able to stop an attack before any damage is done. It additionally maintains an incredibly comprehensive log of all attack attempts which features more info than standard Apache logs, so you could later check out the data and take further measures to boost the security of your sites if necessary.

ModSecurity in Shared Web Hosting

ModSecurity comes standard with all shared web hosting plans which we offer and it shall be activated automatically for any domain or subdomain you add/create within your Hepsia hosting CP. The firewall has three different modes, so you can activate and disable it with only a mouse click or set it to detection mode, so it'll keep a log of all attacks, but it'll not do anything to prevent them. The log for any of your sites will include in-depth info such as the nature of the attack, where it came from, what action was taken by ModSecurity, etcetera. The firewall rules we use are frequently updated and consist of both commercial ones we get from a third-party security company and custom ones which our system administrators include in case that they detect a new kind of attacks. In this way, the sites that you host here will be a lot more protected with no action expected on your end.

ModSecurity in Semi-dedicated Servers

We have integrated ModSecurity as a standard within all semi-dedicated server plans, so your web applications shall be protected whenever you install them under any domain or subdomain. The Hepsia CP that comes with the semi-dedicated accounts will permit you to activate or turn off the firewall for any site with a click. You will also be able to turn on a passive detection mode through which ModSecurity will maintain a log of potential attacks without really stopping them. The thorough logs contain the nature of the attack and what ModSecurity response that attack activated, where it came from, and so on. The list of rules that we use is frequently updated in order to match any new threats that could appear on the Internet and it features both commercial rules that we get from a security firm and custom-written ones which our administrators include in the event that they discover a threat that's not present in the commercial list yet.

ModSecurity in VPS Servers

All VPS servers which are offered with the Hepsia Control Panel come with ModSecurity. The firewall is installed and switched on by default for all domains that are hosted on the machine, so there won't be anything special which you'll have to do to protect your websites. It'll take you simply a mouse click to stop ModSecurity if necessary or to turn on its passive mode so that it records what occurs without taking any actions to prevent intrusions. You'll be able to view the logs created in passive or active mode through the corresponding section of Hepsia and discover more about the type of the attack, where it originated from, what rule the firewall employed to deal with it, and so forth. We employ a combination of commercial and custom rules in order to make sure that ModSecurity shall prevent as many threats as possible, consequently increasing the protection of your web programs as much as possible.

ModSecurity in Dedicated Servers

When you choose to host your Internet sites on a dedicated server with the Hepsia CP, your web applications will be protected immediately since ModSecurity is supplied with all Hepsia-based solutions. You shall be able to control the firewall without difficulty and if needed, you shall be able to turn it off or switch on its passive mode when it'll only maintain a log of what's going on without taking any action to prevent potential attacks. The logs that you will find in the exact same section of the CP are really detailed and include info about the attacker IP address, what site and file were attacked and in what way, what rule the firewall employed to prevent the intrusion, etcetera. This information will permit you to take measures and enhance the protection of your Internet sites even more. To be on the safe side, we use not only commercial rules, but also custom-made ones that our staff include whenever they identify attacks which have not yet been included in the commercial pack.