LiteSpeed / modsecurity

craneinteractive

Hi,

I'm excited to try out Enhance - the one feature I am waiting on is the ability to implement a modsecurity ruleset. I've used the Atomicorp ruleset for years with another panel, but would be happy to test with the Comodo rules as an alternative. If I were to purchase LiteSpeed licences, would I be able to do this today with Enhance, or does it depend on the 'v2 LiteSpeed /OpenLiteSpeed config settings' item on the roadmap? Or is there an alternative way to do this with Apache instead?

Thanks for your work,

Ben.

Aliysa_Enhance

Hi and welcome! At the moment, the LS and Apache config can be manually edited but the settings are overwritten when a site is updated (not recommended.) This will be possible with 'v2 LiteSpeed /OpenLiteSpeed config settings'.

digitalexpanse

Solved entirely by integrating Imunify360 and likely better overall than mod_security.

John-P

digitalexpanse It's not really the same though, one is a free and open source WAF solution, and the other is a paid product that does a lot more (and probably uses a lot more system resources).

There is definitely room for, and it would be nice to have the option of, both, but I don't think that modsecurity should be ignored even if there is an Imunify integration.

digitalexpanse

@John-P interesting, only referring to rulesets
"Its also recommended to disable any third-party mod_security vendors except Imunify360 ruleset (especially OWASP and Comodo). These rulesets can cause a large number of false-positives and duplicate Imunify360 ruleset."

We're typically focus on best in class, which tends to exclude free solutions.

John-P

digitalexpanse Its also recommended to disable any third-party mod_security vendors except Imunify360 ruleset (especially OWASP and Comodo). These rulesets can cause a large number of false-positives and duplicate Imunify360 ruleset."

Yep, that makes sense, I don't think it's ever a great idea to be running multiple solutions that try to do the same thing, it just leads to a whole mess of conflicts. I actually meant that it would be nice to have the option of using either one exclusively rather than both together, but maybe I didn't word it very well.