Hi,
I’m running Enhance Panel 12 with LiteSpeed Enterprise and cPFence WAF.
After upgrading LiteSpeed from 6.3.7 to 6.4.0 RC2, I started getting ModSecurity errors from OWASP CRS rule 901001:
“CRS is deployed without configuration”
This caused HTTP 500 errors across multiple websites.
My current setup loads both:
/usr/local/lsws/conf/owasp/modsec_includes.conf
/opt/cpfence/app/cpfwaf/rules.conf
crs-setup.conf exists and is loaded before REQUEST-901-INITIALIZATION.conf.
Has anyone tested LiteSpeed 6.4.0 RC2 with Enhance and cPFence?
Is LSWS 6.4 currently supported/recommended with Enhance, or should we stay on 6.3.7 for production?
Thanks.