Implementing Comodo Free ModSecurity Vendor Rules for cPanel

[Helposoft Staff]

If you're looking to enhance the security of your cPanel server, Comodo's free ModSecurity rule sets are a robust solution. This guide will walk you through the process of downloading, implementing, and managing these rules effectively.

Comodo Free ModSecurity Rules for cPanel - Introduction​

This guide explains how server administrators can use cPanel to download, implement, and manage Comodo ModSecurity rule sets. Once installed and configured, CWAF (Comodo Web Application Firewall) allows administrators to manually or automatically download and deploy the latest firewall rule sets.
Administrators can use the CWAF agent or plugins for cPanel, DirectAdmin, and Plesk to fetch and install new rules as soon as they become available. Additionally, these plugins enable the configuration and customization of the rule sets by excluding unwanted rules.
CWAF has been tested on Apache and LiteSpeed on Linux servers. It is integrated as a ModSecurity vendor in cPanel, DirectAdmin, and Plesk, allowing users to manage Comodo protection rules using the panel's internal tools.

System Requirements​

The Web Application Firewall can be implemented on the following web application servers:

• Apache or LiteSpeed web server on Linux server platform
• ModSecurity 2.7.5 and higher

Deploying Comodo ModSecurity Rule Set in cPanel​

Comodo ModSecurity protection rules are integrated into cPanel and can be activated from the 'Security Center'. Follow these steps:

1. Sign in to your cPanel account.
2. Important Note: cPanel ModSecurity Vendors are not compatible with the CWAF plugin. You cannot use both simultaneously for managing your protection rules. Avoid activating both Comodo Rule Sets for Apache and LiteSpeed simultaneously to prevent conflicts.
3. Click the 'Security Center' tab from the left menu, then 'ModSecurity Vendors'.
4. Click 'Add Vendor' in the 'ModSecurity Vendor Manager' screen.
5. In the 'Add Vendor' page, enter the vendor configuration URL depending on your web server type:
   • For Comodo ModSecurity Apache Rule Set: https://waf.comodo.com/doc/meta_comodo_apache.yaml
   • For Comodo ModSecurity LiteSpeed Rule Set: https://waf.comodo.com/doc/meta_comodo_litespeed.yaml

About Comodo Security Solutions​

Comodo Security Solutions provides a range of security products designed to protect systems from various threats. Their ModSecurity rule sets are a testament to their commitment to providing robust, up-to-date security measures for web servers.

---

Feel free to ask any questions or share your experiences with us, implementing these rules in your cPanel environment!