How to Enable or Disable ModSecurity in cPanel

How to Enable or Disable ModSecurity in cPanel

By: ZebraHost

Is your IP frequency blocked when you access a WordPress admin area or any type of script with a web browser? Are you left with the feeling that your IP is blocked or that the server is down or isn’t working?

If the answer is Yes, then it may have happened as a result of Mod Security.

What is Mod Security?

ModSecurity is a module which protects your website from various types of attacks. Mod security protects our website from various attacks including brute force, hackers, cross-site request forgery (CSRF) and many other threats. Although it can sometimes create problems, we do not recommend you disable it but rather fix your software vulnerability. The reason for this is that ModSecurity only blocks your website if your software security is bad.

Disabling ModSecurity can help you determine whether your UP or your client/Visitor’s IP is blocked by ModSecurity. If it isn’t the case, however, it means that your IP is blocked for a different reason.

However, if you are sure that ModSecurity is the reason your UP is blocked, then contact us and we will find the exact reason behind it in order to resolve your issue so that you are not required to disable the module.

How to Enable or Disable Mod Security in cPanel

  1. Log into your cPanel account.

  2. In the Security section, click on the ModSecurity icon.

    image

  3. If ModSecurity is enabled, it will show a Disable option. Click it, and ModSecurity will be disabled on all your domains. Next time, if you want to enable it, you will only need to click on Enable. This will enable it on all domains.

    image

How to Disable ModSecurity Only on Selected Domains and Not on All Domains?

it is possible that you have multiple domains and you wish to disable or enable ModSecurity only on selected domains.

  1. Log into cPanel from the Security section, click on the ModSecurity icon.

  2. Scroll down to the bottom of the page.

  3. Under the “Status” option next to the domain, click on On or Off.

    image