How to Enable ModSecurity™ Domain Manager via WHM Panel?

Deploying ModSecurity, an open-source web application firewall (WAF) from cPanel, is a viable solution against various online threats. Before users can utilize the application on their domains, it is essential to activate the ModSecurity™ Domain Manager via WHM on the server. 

To enable ModSecurity™ Domain Manager, follow these steps:

1. Log in to the WHM interface using your root account.

2. Navigate to the Security Center in the menu options.

3. Select "ModSecurity™ Vendors."

The Manage Vendors page will be displayed.

4. Initially, install the "OWASP ModSecurity Core Rule Set VX.X" version from the vendor by clicking on +install.

5. Select the "Install and Restart Apache" button.

The system will display a success message: "You have successfully installed the vendor: OWASP ModSecurity Core Rule Set VX.X."

6. Turn on the toggle button in the Enabled column.

It will encompass all sets of the ModSecurity application for the installed vendor.

You can customize the sets included in the ModSecurity application for the vendor.

7. Select "Edit."

8. Adjust the status of any sets to On or Off for the vendor's ModSecurity based on your preferences.

Now, you need to activate the ModSecurity feature for your cPanel accounts.

To Enable ModSecurity for cPanel Accounts:

1. Return to the home page of the interface.

2. Choose the "Packages" option from the navigation menu.

3. Access the Feature Manager.

You have two options here:

• Add a new features list: Create a new feature list from the beginning and apply it to a cPanel account.

• Manage feature list: Add the ModSecurity™ Domain Manager feature to the existing list you are currently using for a cPanel account.

Let's choose the second option.

4. Click the "Edit" button under the Manage feature list.

The list of all available features for your server will be displayed.

5. Check the box for the ModSecurity™ Domain Manager feature.

6. Scroll down and click the Save button.

By doing so, you will have activated ModSecurity for the cPanel accounts. Users can manage the application's status through their cPanel interface, enabling or disabling it as needed.