Page 1 of 1

Plesk 12 and Atomic Basic ModSecurity rule set

Posted: Fri Oct 03, 2014 12:30 am
by pinguina
Hi there,
I have Parallels Plesk 12.0.18 with CentOS 6.5 (Final)

WAF is On, with Atomic Basic ModSecurity rule set.

I was wondering if my sites were protected and I went to the Atomic wiki.

When I run a test from a non-whitelisted system following these instructions (STEP 10) https://www.atomicorp.com/wiki/index.ph ... web_server
I always receive 404 error.

Is there any other way to check if WAF is protecting my server with Plesk 12?

Thanks in advance.

P.

Re: Plesk 12 and Atomic Basic ModSecurity rule set

Posted: Tue Oct 07, 2014 9:08 am
by scott
you'd need to ask parallels about this, we made the ruleset available to them, but they implemented it using their own design. They might not be using 403 error codes like we do.

Re: Plesk 12 and Atomic Basic ModSecurity rule set

Posted: Wed Oct 08, 2014 9:16 pm
by pinguina
Thanks Scott, Im gonna ask them.
In the meantime Im gonna test ASL.
I hope it works without issues with Plesk 12

P.

Re: Plesk 12 and Atomic Basic ModSecurity rule set

Posted: Thu Oct 09, 2014 4:19 pm
by mikeshinn
ASL is fully supported with Plesk 12. We use Plesk 12.