Install Imunify360 installed OWASP ModSecurity Vendor

Forum

Sign In Here

Sign in to your account

If you are new here please register for an account

Username:

Password:

Remember Me

Forgot Password?

Resolved Install Imunify360 installed OWASP ModSecurity Vendor

Morten
Monday, 20 March 2017
Subscribe via email

Hello,

I tested IM360 on a second server last week and got some issues.
When IM360 was installed OWASP mod_security rules where installed and activated and that caused a lot of issues for customers since we have Comodo WAF on all servers.

I disabled it and removed OWASP inside WHM and that fixed the issue.
I also see in WHM now:
Home »Security Center »ModSecurity™ Tools »Hits ListDocumentation

That Comodo WAF rules are listing and working fine now!

Rate this post:

Responses (5)

20.03.2017 13:03:16
# 1

Morten Accepted Answer

Posts: 104
Joined: 16.04.2014

Votes

Undo

Generating report...
Uploading...
Key: AGSSUKajNN0hg71rhR.b6eaf92d-5252-4154-8a0b-01c0ef74b294

20.03.2017 13:03:44
# 2

Morten Accepted Answer

Posts: 104
Joined: 16.04.2014

Votes

Undo

Customers also told us they got to a catpcha site and that worked fine in Chrome. but not in other browsers.
I will test this myself aswell.....

20.03.2017 13:03:43
# 3

Oleksiy Shchukin Accepted Answer

Posts: 20
Joined: 16.03.2017

Votes

Undo

Hi Morten,

We decided not to go with OWASP rules in future releases but switch to Comodo rule vendor due to higher false-positives rate with OWASP. You will not face this issue anymore for Imunify next release.

Thank you for the feedback,
Imunify developer

20.03.2017 13:03:17
# 4

Morten Accepted Answer

Posts: 104
Joined: 16.04.2014

Votes

Undo

Ok, that's fine. But what caused this was Imunify activate or install and use OWASP when we are actually using CWAF.

Alot use Comodo instead of OWASP, but we and I think most others use their cPanel plugin and not their vendor setup FYI if that has anything to do with your setup etc.

cPanel plugin documentation