{"id":5022,"date":"2020-08-26T11:26:03","date_gmt":"2020-08-26T11:26:03","guid":{"rendered":"http:\/\/cloudminister.com\/?p=5022"},"modified":"2025-09-22T07:42:05","modified_gmt":"2025-09-22T07:42:05","slug":"modsecurity-configuration-cwp-differs-from-csf","status":"publish","type":"post","link":"https:\/\/cloudminister.com\/blog\/modsecurity-configuration-cwp-differs-from-csf\/","title":{"rendered":"What is the ModSecurity, how it is different from CSF and how to configure ModSecurity on Centos Web Panel (CWP)?"},"content":{"rendered":"\n
\"\"<\/figure>\n\n\n

ModSecurity<\/b><\/h2>\n

ModSecurity is an open-source web-based application firewall is deployed to establish an external security layer to prevent web servers<\/a> from various attacks. ModSecurity is also supported by different web servers like Nginx, Apache, and IIS.<\/span><\/p>\n

It helps to protect from various attacks happen in our surroundings ,like:<\/span><\/p>\n

Session hijacking, SQL injection, trojans, etc.<\/span><\/p>\n

ModSecurity is different from CSF as CSF provides server security for FTP, SSH, and various Ports, but there is no protection for web servers which is why ModSecurity modules help to protect web servers<\/a>.<\/span><\/p>\n

Configure ModSecurity<\/b><\/h2>\n

To configure ModSecurity in CWP, first, you need to log in to the CWP admin panel<\/a> on the 2087 port. Then select the Security<\/a> drop-down option, and inside it select ModSecurity.\u00a0<\/span><\/p>\n

<\/p>\n

In CWP, only one ModSecurity is freely available, and the other two come with the CWP Pro version. Click on Install ModSecurity Configuration, and it takes some time.<\/p>\n

<\/p>\n

After the installation is completed, it shows a log file. Now you must restart the Apache server to see the effect.<\/p>\n

<\/p>\n

Now you can also check the error logs by clicking on the Error Log tab on the top.<\/p>\n

<\/p>\n

Most Common Errors<\/p>\n

If you get 403 Forbidden messages, that means that the ModSecurity rules work; now check the error log file and search for the rule IDs that are displayed.<\/p>\n

To solve the above problem, copy the rule ID, click on accounts, and click on Edit Rules.<\/p>\n

<\/p>\n

Make an entry in the edit file like this:<\/span><\/p>\n

SecRuleRemoveById 970091<\/span><\/p>\n

Save the changes.<\/span><\/p>\n

<\/p>\n

After the above changes in a file, the error 403 will be resolved.<\/p>\n

CONCLUSION<\/h3>\n

The above configuration shows how to configure ModSecurity in CWP and enhance web-based security<\/strong>.<\/p>\n

\u00a0<\/p>","protected":false},"excerpt":{"rendered":"

ModSecurity ModSecurity is an open-source web-based application firewall is deployed to establish an external security layer to prevent web servers from various attacks. ModSecurity is also supported by different web servers like Nginx, Apache, and IIS. It helps to protect from various attacks happen in our surroundings ,like: Session hijacking, SQL injection, trojans, etc. ModSecurity…<\/p>\n","protected":false},"author":3,"featured_media":5023,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"footnotes":""},"categories":[235,56,309,809,288],"tags":[54,321,313,322,323],"class_list":["post-5022","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-centos","category-cwp-basics","category-cwp-panel","category-modsecurity","category-web-panel","tag-centos-web-panel","tag-configure-modsecurity","tag-cwp7-admin","tag-mod-security-configurator","tag-modsecurity"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t