The recommended ModSecurity settings for Plesk are:ĭuring installation on DirectAdmin, Imunif圓60 will try to install ModSecurity automatically using custombuild 2.0.

Connections Engine - Do not process the rules.

Audit Log Level - Only log noteworthy transactions.

The recommended ModSecurity settings for cPanel are:

If ModSecurity is installed prior to installing Imunif圓60, the rules will be installed automatically.

If ModSecurity is installed after installing Imunif圓60, it is important to execute the following command (for cPanel/Plesk) to add ModSecurity rulesets to Imunif圓60:.

Install ModSecurity using the official hosting panel documentation:.

In this article, we will show how to install ModSecurity for Imunif圓60, and how to disable other third-party ModSecurity vendors on different hosting panels. These rulesets can generate a large number of false-positives, and may duplicate Imunif圓60’s rulesets.

ModSecurity is installed automatically only for DirectAdmin and Plesk since Imunif圓60 version 3.6, and on some hosting panels, other, third-party ModSecurity vendor’s rulesets may be installed (for example, OWASP or Comodo).

Malware scanning of files uploaded via the web.ModSecurity, the open-source web application firewall, is important software for Imunif圓60.

Comodo waf cpanel