The default configuration file is set to DetectionOnly which logs requests according to rule matches and doesn’t block anything. Input one of URLs depending on your web-server:Ĭlick Load and then Save. Well donwloaded comodo rules for litespeed but doesnt work on open litespeed keep getting errors like below. Out of the box, modsecurity doesn’t do anything as it needs rules to work. In the ‘Add Vendor‘ page, Vendor Configuration URL : enter Let’s get started with Comodo ModSecurity Apache Rule SetĬlick the ‘Security Center‘ tab from the left menu, then ‘ModSecurity™ Vendors‘Ĭlick ‘Add Vendor‘ in the ‘ModSecurity™ Vendors‘ screen. It is also possible to disable modsecurity for a specific domain name and the account in. The CRS aims to protect web applications from a wide range of attacks, including the OWASP Top Ten, with a minimum of false alerts. It acts as baseline protection for common web application attack ModSecurity rule(-s) may be whitelisted by our support team only. The OWASP ModSecurity Core Rule Set (CRS) is a set of generic attack detection rules for use with ModSecurity or compatible web application firewalls. These rules do not make your server impervious to attacks, they greatly increase the amount of protection for web applications. Comodo ModSecurity rules for CPanel server, support both Apache and LiteSpeed web servers, easy to install, and managed from the Cpanel ModSecurity Vendors option.

Comodo modsecurity rules