Comodo Web Application Firewall Administartor Guide for Plesk

Comodo

Web Application Firewall for

Plesk

Software Version 2.11

Administrator Guide

Guide Version 2.11.011320

Comodo Security Solutions

1255 Broad Street

Clifton, NJ 07013

Comodo Web Application Firewall for Plesk - Admin Guide

Table of Contents

1. Comodo Free ModSecurity Rules for Plesk - Introduction...................................................................................3

1.1.System Requirements.........................................................................................................................................3

1.2.Signing up for Free ModSecurity Rules..............................................................................................................3

2.Deploying Comodo ModSecurity Rule Set in Plesk...............................................................................................8

About Comodo Security Solutions...........................................................................................................................15

Comodo Web Application Firewall for Plesk - Admin Guide

1. Comodo Free ModSecurity Rules for

Plesk - Introduction

This guide is explains how server administrators can use Plesk to download, implement and manage Comodo Mod-

Security rule sets.

Once installed and configured, CWAF just requires the latest firewall rule sets to be downloaded and deployed to

your servers. The simple web administration console allows administrators to manually download and implement the

latest rule set or a rule-set from a previous version. Administrators can install the CWAF agent or the web hosting

control panel plugin (currently cPanel, DirectAdmin and Plesk plugins are available) to automatically fetch and install

the new rules as soon as they become available. The plugins can also be used to configure the overall behavior of

CWAF and to customize the rule sets by excluding unwanted rules from implementation.

CWAF has been tested on Apache and LiteSpeed on Linux servers. Versions for other web-server types are coming

shortly.

CWAF is also integrated as a ModSecurity vendor in cPanel, DirectAdmin and Plesk panels and users can

enable/disable Comodo protection rules and manage them with panel's internal tools.

Guide Structure

This guide is intended to take the administrator the setup, configuration and use of Comodo Web Application Firewall

in Plesk panel

• Comodo Web Application Firewall - Introduction - A high level description of the product

• System Requirements - List of compatible server environments for CWAF

• Deploying Comodo ModSecurity Rule Sets in Plesk - Guidance on downloading and deploying the

firewall rule sets on to the server

1.1.System Requirements

The Web Application Firewall can be implemented on to the following web application servers:

• Apache 2 or LiteSpeed web server on RHLE, CentOS, CloudLinux, Debian, OpenSuSe and Ubuntu

platform

• ModSecurity 2.7.5 and higher

1.2.Signing up for Free ModSecurity Rules

In order to enable Comodo ModSecurity Rules in Plesk, you need to have a Comodo Web Application Firewall

account registered. The administrator can sign-up for the CWAF service from the Comodo Accounts Manager at

https://accounts.comodo.com/cwaf/management/signup.

To sign-up for CWAF

• Visit the CWAF sign-up page at https://accounts.comodo.com/cwaf/management/signup. The Sign-up

form will appear.

• Select the CWAF product from the list

Comodo Web Application Firewall for Plesk - Admin Guide

• Select the CWAF product from the list

Comodo Web Application Firewall for Plesk - Admin Guide

User Details:

• If you are a new to customer, select 'No' for 'Are you an existing Comodo customer?' and enter the details

• If you already have an account at Comodo Accounts Manager created while subscribing for some other

Comodo Web Application Firewall for Plesk - Admin Guide

product or you are renewing the CWAF license, select 'Yes' for 'Are you an existing Comodo customer?'.

You will need to fill only your username and password.

Contact Information and Billing Information:

• Enter the details in the appropriate fields. The fields marked with * are mandatory.

• If the Billing address is different from the contact information, deselect the 'The same as Contact

Information' check box and enter the billing address.

Comodo Web Application Firewall for Plesk - Admin Guide

Payment Options:

• Select your payment mode in the 'Payment Options' section and enter the required details in the respective

fields.

Communication Options:

• If you wish to sign up for news about Comodo products, select the check box under the 'Communication

Options'. The periodical news and announcements from Comodo on new product releases, special offers

upgrades and so on, will be notified to you through email.

Terms and Conditions:

• Read the 'End User License and Subscriber Agreement' and accept to it by selecting 'I accept the Terms

and Conditions' checkbox.

Comodo Web Application Firewall for Plesk - Admin Guide

• Click 'SIGN UP'

Upon successful payment processing, your account will be activated. You can use the same username and

password you created or used during enrollment to activate Comodo ModSecurity Rule set in Plesk.

Further Reading:

• Deploying Comodo ModSecurity Rule Set in Plesk

2.Deploying Comodo ModSecurity Rule

Set in Plesk

Comodo ModSecurity protection rules are now integrated in Plesk panel and can be activated from the 'Tools &

Settings' feature.

• Sign in to your Plesk account

Comodo Web Application Firewall for Plesk - Admin Guide

• In the Plesk home page, click 'Tools & Settings' under 'Server Management'

• In the 'Security' section, click 'Web Application Firewall (ModSecurity)

Comodo Web Application Firewall for Plesk - Admin Guide

• In the 'Web Application Firewall' interface, click the 'Change Rule Set' link beside 'Selected rule set' row.

Comodo Web Application Firewall for Plesk - Admin Guide

• The 'Settings' for Rules Set screen will be displayed. Select 'Comodo ModSecurity rule set (subscription)'

from the options.

Comodo Web Application Firewall for Plesk - Admin Guide

• Next, you need to provide your credentials that was created during sign up for CWAF.

Comodo Web Application Firewall for Plesk - Admin Guide

• If you have not signed up for CWAF, you can do so by clicking the 'Register at Comodo Site' link. Refer to

the section 'Signing up for Free ModSecurity Rules' for more details.

• Enter the CWAF username and password that was created during signing up for CWAF in the respective

fields.

• Scroll down the page and click the 'OK' button at the bottom of the screen.

Comodo Web Application Firewall for Plesk - Admin Guide

The account details will be authenticated with Comodo and on successful verification, the Comodo ModSecurity Rule

will be saved in the Plesk panel.

That's it. Comodo ModSecurity Rules Set is now activated in Plesk.

Comodo Web Application Firewall for Plesk - Admin Guide

About Comodo Security Solutions

Comodo Security Solutions is a global innovator of cybersecurity solutions, protecting critical information across the

digital landscape. Comodo provides complete, end-to-end security solutions across the boundary, internal network

and endpoint with innovative technologies solving the most advanced malware threats. With over 80 million

installations of its threat prevention products, Comodo provides an extensive suite of endpoint, website and network

security products for MSPs, enterprises and consumers.

Continual innovation and a commitment to reversing the growth of zero-day malware, ransomware, data-breaches

and internet-crime distinguish Comodo Security Solutions as a vital player in today's enterprise and home security

markets.

About Comodo Cybersecurity

In a world where preventing all cyberattacks is impossible, Comodo Cybersecurity delivers an innovative

cybersecurity platform that renders threats useless, across the LAN, web and cloud. The Comodo Cybersecurity

platform enables customers to protect their systems and data against even military-grade threats, including zero-day

attacks. Based in Clifton, New Jersey, Comodo Cybersecurity has a 20-year history of protecting the most sensitive

data for both businesses and consumers globally. For more information, visit comodo.com or our blog. You can also

1255 Broad Street

Clifton, NJ 07013

United States

Tel : +1.877.712.1309

Tel : +1.888.551.1531

https://www.comodo.com

Email: [email protected]