Enable/Disable ModSecurity in CWP

ModSecurity is an open-source web application firewall module for Apache and Nginx. It defends against cyber threats by monitoring and blocking activities like SQL injection and cross-site scripting, enhancing web security through customizable protection.

Here, we cover enabling and disabling ModSecurity for individual domains in the Control Web Panel (CWP). This can be useful for troubleshooting to determine if ModSecurity is causing a blockage or an issue.

It is important to note that we never recommend ModSecurity to be left disabled. Disabling ModSecurity should generally only be done for troubleshooting purposes.

Enable/Disable ModSecurity

CAUTION: Disabling ModSecurity should only be done for troubleshooting purposes. We never recommend ModSecurity be left disabled.
IMPORTANT:This solution will require root access. If this needs to be obtained, follow the guide on requesting root access.
 

1. Log into CWP Admin
2. Click ModSecurity, located in the Security section
   
   
    
3. Select the Domains tab
4. Locate the row with the appropriate account
5. Under Actions, toggle ON/OFF to enable or disable ModSecurity