Activating the application firewall
Find out how to activate the application firewall on a Web Hosting plan
Last updated 26th April 2021
Objective
ModSecurity is a complementary Apache module that filters all incoming requests on your web server. It increases security against known vulnerabilities by intercepting and filtering requests before they are processed by any scripts.
The preconfigured Core Rule Set (CRS) of our ModSecurity protects your websites against the most common attacks, for example:
- Trojans
- Email injections
- Broken PDF files
- File injections on your hosting system
- SQL or XSS type injections
This guide explains how to enable your application firewall for enhanced protection in your OVHcloud Control Panel.
Requirements
- an OVHcloud Web Hosting plan
- at least one domain name attached to the hosting
- access to the OVHcloud Control Panel
Instructions
Log in to the OVHcloud Control Panel and switch to Web Cloud.
Click on Hosting Plans in the services bar on the left-hand side and select the plan concerned.
Activating the application firewall in PHP configuration
Click on the General information tab. The current Global PHP version is displayed in the Configuration box. Click on the ... icon and select Modify configuration. In the popup window, select the item Modify the current configuration and click on the Next button.
In the new window, make sure that Application firewall is set to activated. To confirm the configuration, click on the Confirm button.
Activating the application firewall for individual domains in Multisite
Switch to the Multisite tab of your hosting plan. Click on the ... button in the row of the respecive domain and select the Modify domain option.
In the configuration window, check the Enable the firewall box. You can also include the www subdomain in this configuration by checking the box at the top.
Click on Next and then on Confirm to modify the Multisite settings.
Checking the status of the activation task
Tasks to update your Multisite configuration will be listed in the Ongoing jobs tab (initial status is Planned). The firewall will be active once its update task no longer appears in the list.
Verifying which domains have the firewall enabled
The Multisite tab of your hosting plan provides information on which domains have the firewall option turned on.
The table displayed contains all of the domain names that have been added to your Web Hosting plan. In the "Firewall" column, you will see the activation status for each domain.
Go further
Join our community of users on https://community.ovh.com/en/.
Did you find this guide useful?
Please feel free to give any suggestions in order to improve this documentation.
Whether your feedback is about images, content, or structure, please share it, so that we can improve it together.
Your support requests will not be processed via this form. To do this, please use the "Create a ticket" form.
Thank you. Your feedback has been received.