Plesk 12 and ASL

[kram]

Hello,

I am considering having a go at Plesk 12 and was wondering if Plesk and ASL play nice together?
I ran the Plesk updater today to see what it had to say and this is what I got.

Parallels Panel pre-upgrade check...
ERROR: You have already installed mod_security package which is not from Panel distribution.
You should deinstall package mod_security before component 'modsecurity' installation, otherwise your apache web-server will be broken.

Any thoughts or suggestions?

[scott]

Stick with our packages, I'll reach out to them about that error. They know we've got the lead on this one.

Also make sure you do not use the internal plesk mod_security interface under the server settings. It will cause a conflict due to them not being able to support the load order we recommend (yet). They know about the vulnerability they're causing with their implementation, they just cant fix it at this time.

[rockbrook]

Looking to upgrade Plesk 11.5.30 to 12.0.18. I already have ASL 4.0.4-15 installed.

The Plesk auto-upgrade gives this warning:

Parallels Panel pre-upgrade check...
WARNING: You have already installed mod_security package which is not from Panel distribution.
You should deinstall package mod_security before component 'modsecurity' installation, otherwise your apache web-server will be broken. Check KB article for details http://kb.parallels.com/122324

How do you recommend I proceed? Is it safe to upgrade Plesk with ASL installed, or should I disable some part of ASL first.

Thanks

[hostingg]

Definitely dont use Parallels modsecurity packages. I'm not sure why they did this, but when we upgraded to 12 it replaced modsecurity on our system with a broken version. We reported this to Plesk several weeks ago, but they dont seem to in a hurry to fix it. Stick with Atomicorps modsecurity packages, they always work.

[rockbrook]

Thanks for the response. I see that the ASL modsecurity is preferable, but I'm unclear about how best to do the upgrade of Plesk. Do you think I should first uninstall the ASL WAF, and if so how do I do that?

[rockbrook]

How about this for an upgrade procedure?

1. Disable ASL WAF using the web GUI.
2. Use Plesk auto-installed to upgrade to Version 12
3. Disable Plesk modsecurity module, Tools & Settings > Web Application Firewall (ModSecurity)
4. Re-enable ASL WAF module.

[mikeshinn]

You may likely have to reinstall the mod_security rpm as well as Plesk may replace it with a known broken version, and prevent installation of the known good version we provide.

If this happens, the easiest solution is just run the ASL installer again. No need to uninstall, and you wont lose any of your settings or events. Its safe to run the ASL installer over an existing installation.

[rockbrook]

All set. The Plesk update to 12.0.18 ran with no errors, and the ASL installer 4.0.4-15 was also good.

[JnascECSI]

All set. The Plesk update to 12.0.18 ran with no errors, and the ASL installer 4.0.4-15 was also good.

I am getting ready to jump from 11.5 to 12.0.18, you mentioned you had no issues. What process did you follow? scared as hell to make the jump as usually plesk always messes something up.

[prupert]

I suggest to upgrade to Plesk 12 now only if you need their new features.

Plesk 11.x is still supported for two years, see http://www.parallels.com/support/policy ... lifecycle/

[rockbrook]

I agree that the upgrade isn't necessary. I followed the procedure I outlined above making sure that both Plesk and ASL were updated beforehand.

[JnascECSI]

Thanks guys,
I didn't really want to go to 12 either but tired of seeing the "Upgrade to the version 12.0.18 is available." every time i login to Plesk and seems that there's no way to make it only show updates for 11.5 and not the next major versions.

[StephanS]

Any idea if these issues have been resolved yet?

Looking to use ASL with Plesk 12 / CloudLinux / mod_security.

[mikeshinn]

We're using Plesk 12 on all our servers, no problems with ASL.

[Garcia65]

Now you can update to 12.5 and the same error is occurring can this be reported to plesk? I am not sure the bet way to do this.