ModSecurity is a highly effective web application layer firewall for Apache web servers. It monitors the entire HTTP traffic to an Internet site without affecting its overall performance and if it detects an intrusion attempt, it blocks it. The firewall furthermore keeps a more comprehensive log for the traffic than any web server does, so you'll be able to monitor what's going on with your sites better than if you rely only on conventional logs. ModSecurity uses security rules based on which it stops attacks. For instance, it detects whether anyone is trying to log in to the administrator area of a certain script multiple times or if a request is sent to execute a file with a particular command. In these circumstances these attempts set off the corresponding rules and the firewall program hinders the attempts immediately, and then records detailed information about them inside its logs. ModSecurity is one of the most effective software firewalls out there and it could easily protect your web apps against a large number of threats and vulnerabilities, particularly in case you don’t update them or their plugins frequently.

ModSecurity in Cloud Web Hosting

ModSecurity is offered with every single cloud web hosting plan that we provide and it is turned on by default for every domain or subdomain which you include through your Hepsia CP. In the event that it interferes with any of your programs or you'd like to disable it for whatever reason, you'll be able to do this through the ModSecurity section of Hepsia with simply a mouse click. You can also use a passive mode, so the firewall will detect possible attacks and maintain a log, but won't take any action. You'll be able to see comprehensive logs in the exact same section, including the IP address where the attack came from, what exactly the attacker tried to do and at what time, what ModSecurity did, and so on. For optimum safety of our clients we use a group of commercial firewall rules blended with custom ones that are provided by our system administrators.

ModSecurity in Semi-dedicated Hosting

We have integrated ModSecurity as a standard within all semi-dedicated hosting plans, so your web applications shall be protected whenever you set them up under any domain or subdomain. The Hepsia CP which is included with the semi-dedicated accounts shall permit you to switch on or turn off the firewall for any Internet site with a mouse click. You shall also have the ability to turn on a passive detection mode in which ModSecurity shall maintain a log of potential attacks without actually stopping them. The detailed logs include things like the nature of the attack and what ModSecurity response that attack initiated, where it originated from, and so forth. The list of rules which we employ is regularly updated in order to match any new risks which may appear on the Internet and it includes both commercial rules that we get from a security company and custom-written ones which our administrators include in the event that they discover a threat which is not present inside the commercial list yet.

ModSecurity in VPS Web Hosting

All virtual private servers which are offered with the Hepsia CP feature ModSecurity. The firewall is installed and activated by default for all domains that are hosted on the machine, so there won't be anything special that you'll need to do to protect your websites. It will take you only a mouse click to stop ModSecurity if needed or to turn on its passive mode so that it records what happens without taking any actions to stop intrusions. You'll be able to look at the logs generated in active or passive mode through the corresponding section of Hepsia and discover more about the type of the attack, where it originated from, what rule the firewall used to tackle it, and so on. We employ a mixture of commercial and custom rules so as to ensure that ModSecurity will block as many threats as possible, thus enhancing the protection of your web applications as much as possible.

ModSecurity in Dedicated Servers Hosting

All of our dedicated servers that are set up with the Hepsia hosting Control Panel feature ModSecurity, so any app which you upload or set up will be properly secured from the very beginning and you will not need to bother about common attacks or vulnerabilities. An independent section inside Hepsia will permit you to start or stop the firewall for any domain or subdomain, or activate a detection mode so that it records information regarding intrusions, but does not take actions to stop them. What you'll discover in the logs can easily enable you to to secure your sites better - the IP address an attack originated from, what site was attacked as well as how, what ModSecurity rule was triggered, etcetera. With this info, you can see if a website needs an update, whether you need to block IPs from accessing your hosting server, and so forth. Aside from the third-party commercial security rules for ModSecurity we use, our administrators add custom ones as well every time they come across a new threat which is not yet in the commercial bundle.