ModSecurity is a plugin for Apache web servers that acts as a web app layer firewall. It's used to stop attacks towards script-driven websites by using security rules that contain particular expressions. That way, the firewall can prevent hacking and spamming attempts and shield even websites which are not updated on a regular basis. As an example, a number of unsuccessful login attempts to a script admin area or attempts to execute a specific file with the purpose to get access to the script shall trigger specific rules, so ModSecurity shall stop these activities the moment it discovers them. The firewall is quite efficient since it monitors the whole HTTP traffic to a website in real time without slowing it down, so it can prevent an attack before any harm is done. It additionally keeps an incredibly detailed log of all attack attempts which contains more information than typical Apache logs, so you can later check out the data and take extra measures to improve the security of your websites if needed.
ModSecurity in Cloud Hosting
ModSecurity comes by default with all cloud hosting solutions that we offer and it will be switched on automatically for any domain or subdomain you add/create within your Hepsia hosting Control Panel. The firewall has three different modes, so you'll be able to activate and deactivate it with just a click or set it to detection mode, so it'll maintain a log of all attacks, but it shall not do anything to stop them. The log for any of your websites shall contain comprehensive info including the nature of the attack, where it came from, what action was taken by ModSecurity, and so forth. The firewall rules we use are constantly updated and consist of both commercial ones that we get from a third-party security firm and custom ones which our system administrators add in the event that they detect a new kind of attacks. In this way, the websites which you host here shall be a lot more secure with no action expected on your end.
ModSecurity in Semi-dedicated Servers
Any web application that you install in your new semi-dedicated server account shall be protected by ModSecurity since the firewall is included with all our hosting plans and is switched on by default for any domain and subdomain that you include or create via your Hepsia hosting CP. You'll be able to manage ModSecurity through a dedicated area within Hepsia where not only can you activate or deactivate it fully, but you can also enable a passive mode, so the firewall won't block anything, but it shall still maintain a record of possible attacks. This normally requires just a click and you shall be able to see the logs regardless of if ModSecurity is in active or passive mode through the same section - what the attack was and where it originated from, how it was taken care of, and so on. The firewall employs two groups of rules on our machines - a commercial one that we get from a third-party web security company and a custom one that our administrators update manually in order to respond to recently discovered threats as fast as possible.
ModSecurity in VPS Servers
All VPS servers that are provided with the Hepsia Control Panel come with ModSecurity. The firewall is installed and switched on by default for all domains that are hosted on the server, so there will not be anything special that you'll need to do to protect your sites. It'll take you simply a click to stop ModSecurity if needed or to turn on its passive mode so that it records what happens without taking any steps to stop intrusions. You will be able to look at the logs created in passive or active mode from the corresponding section of Hepsia and learn more about the type of the attack, where it came from, what rule the firewall used to take care of it, and so forth. We employ a combination of commercial and custom rules in order to ensure that ModSecurity will stop as many risks as possible, thus enhancing the security of your web apps as much as possible.
ModSecurity in Dedicated Servers
When you opt to host your websites on a dedicated server with the Hepsia Control Panel, your web apps will be protected right from the start since ModSecurity is provided with all Hepsia-based packages. You'll be able to regulate the firewall easily and if needed, you shall be able to turn it off or switch on its passive mode when it will only maintain a log of what is going on without taking any action to stop potential attacks. The logs that you will find inside the same section of the CP are extremely detailed and include information about the attacker IP, what site and file were attacked and in what ways, what rule the firewall employed to stop the intrusion, etc. This information will enable you to take measures and increase the protection of your sites even more. To be on the safe side, we employ not only commercial rules, but also custom-made ones that our admins add every time they identify attacks that have not yet been included in the commercial pack.