Activating the application firewall

Find out how to activate the application firewall on a Web Hosting plan

Last updated 26th April 2021


ModSecurity is a complementary Apache module that filters all incoming requests on your web server. It increases security against known vulnerabilities by intercepting and filtering requests before they are processed by any scripts.

The preconfigured Core Rule Set (CRS) of our ModSecurity protects your websites against the most common attacks, for example:

  • Trojans
  • Email injections
  • Broken PDF files
  • File injections on your hosting system
  • SQL or XSS type injections

This guide explains how to enable your application firewall for enhanced protection in your OVHcloud Control Panel.



Log in to the OVHcloud Control Panel and switch to Web Cloud. Click on Hosting Plans and select the plan concerned.

Activating the application firewall in PHP configuration

Click on the General information tab. The current Global PHP version is displayed in the Configuration box. Click on the ... icon and select Modify configuration. In the popup window, select the item Modify the current configuration and click on the Next button.


In the new window, make sure that Application firewall is set to activated. To confirm the configuration, click on the Confirm button.

Activating the application firewall for individual domains in Multisite

Switch to the Multisite tab of your hosting plan. Click on the ... button in the row of the respecive domain and select the Modify domain option.


In the configuration window, check the Enable the firewall box. You can also include the www subdomain in this configuration by checking the box at the top. Click on Next and then on Confirm to modify the Multisite settings.


Checking the status of the activation task


Tasks to update your Multisite configuration will be listed in the Ongoing jobs tab (initial status is Planned). The firewall will be active once its update task no longer appears in the list.

Verifying which domains have the firewall enabled

The Multisite tab of your hosting plan provides information on which domains have the firewall option turned on.


The table displayed contains all of the domain names that have been added to your Web Hosting plan. In the "Firewall" column, you will see the activation status for each domain.

Go further

Join our community of users on

Did you find this guide useful?

Please feel free to give any suggestions in order to improve this documentation.

Whether your feedback is about images, content, or structure, please share it, so that we can improve it together.

Your support requests will not be processed via this form. To do this, please use the "Create a ticket" form.

Thank you. Your feedback has been received.

These guides might also interest you...

OVHcloud Community

Access your community space. Ask questions, search for information, post content, and interact with other OVHcloud Community members.

Discuss with the OVHcloud community