Overview
We strongly advise keeping ModSecurity switched on for all your domains. Turn it off only for as long as you need to troubleshoot a problem caused by ModSecurity.
Use this page to turn ModSecurity on or off for your domains. A domain with ModSecurity disabled gets no ModSecurity rules at all. To learn more about the rules, see the OWASP® ModSecurity CRS documentation.
If you cannot open this page in your cPanel account, your hosting provider needs to do the following in WHM:
-
Install the mod_security2 module under Apache Modules in WHM's EasyApache 4 interface (WHM » Home » Software » EasyApache 4).
-
Turn on the ModSecurity Domain Manager feature in WHM's Feature Manager interface (WHM » Home » Packages » Feature Manager).
Enable for all domains
Click Enable to activate ModSecurity on every domain.
Disable for all domains
Click Disable to deactivate ModSecurity on every domain. When the confirmation message appears, click Disable All to finish.
Configure Individual Domains
ModSecurity must first be enabled under Configure All Domains; only then can you adjust single domains.
Select On or Off next to a domain to change ModSecurity for that domain only.
