ModSecurity Tools - missing Action Description and Justification

Valetia

• February 02, 2016 22:41

Hi all, In WHM ModSecurity Tools, some of our servers have the Action Description and Justification fields populated, and some don"t (they"re just blank). The Request field is populated at all times. Also, those that have the blank fields also have unclickable entries in the Rule ID column, with the icons being a circle with a diagonal strike through it. The ones with populated fields have clickable entries in the Rule ID column, with the icons being a pencil. Any idea what causes these differences, and how we can get the Action Description and Justification fields populated?

• 

  Infopro

  • February 03, 2016 09:31

  Any idea what causes these differences

  
  Are you using the OWASP ruleset? Those rules should work fine in the interface. Any custom rules you may be using, probably don't.

  0
• 

  Valetia

  • February 03, 2016 11:08

  It doesn"t seem to matter which vendor it is. Whether it"s OWASP or Comodo, the Action Description and Justification fields remain blank on the affected machines. The rules do run as expected, which is why the log entries show up to begin with, but the details of what had caused them to run aren"t showing up in those fields in the log entries.

  0
• 

  Infopro

  • February 03, 2016 11:27

  Strange indeed. I'm using Comodo rules, OWASP rules, Atomicorp rules on different servers and these fields are populated as expected. What version of cPanel is that server running? Please feel free to open a ticket to cPanel Technical Support about this if you like.

  0

Please sign in to leave a comment.