IDS, IPS and security strengthening additions

Oryon

Hello Enhance & Community,

An intrusion detection and protection suite would help a lot since my own web server became an attack source out of nowhere (it was not on Enhance), it wasn't in use as well.

We can take a inspiration from Plesk's Juggernaut Security and Firewall addon.

A Intrusion detection and protection software is necessary in this modern time to mitigate threats, Enhance currently has ModSecurity for WAF and Bruteforce protection for DDoS and rate limiting, an IDS and IPS system would cover the protection on Web Server side.

Cordially,
Oryon

xyzulu

..and what about the resources usage considerations for such a system? DPI (even SPI) is resource intensive.

Are you suggesting something like Zenarmour, or more something like Suricata? What do you currently use on your servers? I'm interested to hear your feedback and experience.

(Personal disclaimer: I do not think a IDS/IPS on a webserver is a good idea at all, instead this kind of "monitoring/protection/packet inspection" should happen elsewhere)

JohnB

IDS/IPS shouldn't be in the panel. Leave it solutions dedicated to doing it right and have the resources to keep up with emerging threats. Multiple already integrate.

xyzulu

JohnB I agree.. but I am trying to help the original poster to explain more about the feature they are requesting.

Far too many people just "drop and run" feature requests. If they are serious, they will be willing to discuss things first.. I hope.

JohnB

xyzulu Far too many people just "drop and run" feature requests. If they are serious, they will be willing to discuss things first.. I hope.

Completely agree its frustrating. I'd hate to be Adam.

Anyway I'd like to request a button on the dashboard called "Zoom Zoom" that automatically optimizes the site, sets up cloudflare workers, above the fold CSS generation that works with any theme and plugins. With AI of course.