How to Enable/Disable Mod Security in cPanel

Overview

With over 70% of all attacks now carried out over the web application level, organizations need every help they can get in making their systems secure.

Web application firewalls are deployed to establish an external security layer that increases the protection level, detects and prevents attacks before they reach web-based software programs.

ModSecurity is an open-source web-based firewall application (or WAF) supported by different web servers: Apache, Nginx and IIS.

Usage

The module is configured to protect web applications from various attacks. ModSecurity supports flexible rule engine to perform both simple and complex operations. It comes with a Core Rule Set (CRS) which has various rules for:

• cross website scripting
• bad user agents
• SQL injection
• trojans
• session hijacking
• other exploits

How to Enable / Disable ModSecurity in your cPanel Account:

STEP 1: Login to your cPanel Account (https://yourdomain.com/cpanel or https://yourdomain.com:2083)

(Do not forget to replace yourdomain.com with your actual domain name)

STEP 2: Search for ModSecurity in your cPanel homepage under "Security" section and click it.

STEP 3: In "Configure All Domains" section, you can enable or disable mod security for all the domains and subdomains within your cPanel account. Choose option accordingly. 

Or if you want to enable / disable mod security in individual domain or subdomain, you can do it using On / Off toggle option on the right side under Status column. 

That's it!