Activating the application firewall

Find out how to activate the application firewall on a Web Hosting plan

Last updated 26th April 2021

Objective

ModSecurity is a complementary Apache module that filters all incoming requests on your web server. It increases security against known vulnerabilities by intercepting and filtering requests before they are processed by any scripts.

The preconfigured Core Rule Set (CRS) of our ModSecurity protects your websites against the most common attacks, for example:

  • Trojans
  • Email injections
  • Broken PDF files
  • File injections on your hosting system
  • SQL or XSS type injections

This guide explains how to enable your application firewall for enhanced protection in your OVHcloud Control Panel.

Requirements

Instructions

Log in to the OVHcloud Control Panel and switch to Web Cloud. Click on Hosting Plans in the services bar on the left-hand side and select the plan concerned.

Activating the application firewall in PHP configuration

Click on the General information tab. The current Global PHP version is displayed in the Configuration box. Click on the ... icon and select Modify configuration. In the popup window, select the item Modify the current configuration and click on the Next button.

managephpconfig

In the new window, make sure that Application firewall is set to activated. To confirm the configuration, click on the Confirm button.

Activating the application firewall for individual domains in Multisite

Switch to the Multisite tab of your hosting plan. Click on the ... button in the row of the respecive domain and select the Modify domain option.

managemultisite

In the configuration window, check the Enable the firewall box. You can also include the www subdomain in this configuration by checking the box at the top. Click on Next and then on Confirm to modify the Multisite settings.

modifydomain

Checking the status of the activation task

manageongoing

Tasks to update your Multisite configuration will be listed in the Ongoing jobs tab (initial status is Planned). The firewall will be active once its update task no longer appears in the list.

Verifying which domains have the firewall enabled

The Multisite tab of your hosting plan provides information on which domains have the firewall option turned on.

manageenabled

The table displayed contains all of the domain names that have been added to your Web Hosting plan. In the "Firewall" column, you will see the activation status for each domain.

Go further

Join our community of users on https://community.ovh.com/en/.


Did you find this guide useful?

Please feel free to give any suggestions in order to improve this documentation.

Whether your feedback is about images, content, or structure, please share it, so that we can improve it together.

Your support requests will not be processed via this form. To do this, please use the "Create a ticket" form.

Thank you. Your feedback has been received.


These guides might also interest you...

OVHcloud Community

Access your community space. Ask questions, search for information, post content, and interact with other OVHcloud Community members.

Discuss with the OVHcloud community

In accordance with the 2006/112/CE Directive, modified on 01/01/2015, prices incl. VAT may vary according to the customer's country of residence
(by default, the prices displayed are inclusive of the UK VAT in force).