Modsecurity Vendor Rule

hrace009

• September 27, 2016 23:36

Hello, I am not to much experience at mod_security. I have installed Commodo ModSecurity Vendor Rule Set. Should i disable or Enable build in cPanel rule set?

• 

  24x7server

  • September 28, 2016 12:14

  Hello :), You can enable/disabled it through WHM. Please check following docs. ModSecurity Vendors - Documentation - cPanel Documentation

  0
• 

  hrace009

  • September 28, 2016 12:17

  Hello :), You can enable/disabled it through WHM. Please check following docs.

  0
• 

  linux4me2

  • September 28, 2016 18:33

  I'm not an expert, but in my experience, it is best to have only one vendor rule set enabled, so you should disable the OWASP rule set if you're going to use the Comodo CWAF vendor rule set. The other thing you should do is go through all the Comodo rules (Security -> ModSecurity Tools -> Rules List) starting from the last page and working forward, and disable all of the rules for software you do not and never will have installed on the server for better performance and fewer false positives.

  0
• 

  hrace009

  • September 29, 2016 03:42

  I'm not an expert, but in my experience, it is best to have only one vendor rule set enabled, so you should disable the OWASP rule set if you're going to use the Comodo CWAF vendor rule set. The other thing you should do is go through all the Comodo rules (Security -> ModSecurity Tools -> Rules List) starting from the last page and working forward, and disable all of the rules for software you do not and never will have installed on the server for better performance and fewer false positives.

  
  hi, yes i read their notes Warnings: [LIST]

  cPanel ModSecurity Vendors are not compatible with CWAF plugin. So, you can't use both in parallel for management your protection rules.

  Don't activate both Comodo Rule Sets for Apache and LiteSpeed simultaneously to avoid conflicts. Release Notes: [LIST]

  In the current version you can't report problems with Comodo rules through cPanel ModSecurity Tools.

  We don't recommend to enable two ModSecurity Vendors simultaneously to avoid possibly logical conflicts and performance issues.
  seems it must one to enable

  0
• 

  cPanelMichael

  • October 05, 2016 22:43

  seems it must one to enable

  
  Hello, Yes, this is correct. It's documented on their plugin page at: Deploying Comodo ModSecurity Rule Set in cPanel, Comodo Web Application Firewall v2.4, Firewall Software Thanks!

  0

Please sign in to leave a comment.