Support » Plugin: BulletProof Security » WAF firewall

  • Resolved Jaso

    (@subwebsites)


    Is this firewall full WAF, Web Applicatiin Firewall or just simple WordPress firewall..
    the peo version page dlesnt mention anything.

Viewing 4 replies - 1 through 4 (of 4 total)
  • Jaso

    (@subwebsites)

    Does it load before WlrdPress loads?

    Jaso

    (@subwebsites)

    And ca it also replace cPanel MOD Secueity?

    Plugin Author AITpro

    (@aitpro)

    The firewall in BPS is similar to the ModSecurity firewall. The BPS root htaccess file is is a distributed server configuration file that contains security rules and is processed first by your server. The htaccess security rules are applied to your server/website before any WordPress files are processed. ModSecurity is installed server-side and BPS htaccess files are client side. ModSecurity SecRules and BPS htaccess security rules are processed first for any Requests made to your website.

    ModSecurity out of the box does not block many things. If you have the OWASP ModSecurity Core Ruleset installed then most likely you are going to have a lot of false positives and will most likely block a fair amount of legitimate things in any plugins and themes that you have installed. Note: web host support techs typically are unable to solve/resolve ModSecurity problems. BPS contains a relatively small amount of default htaccess security rules that are specifically designed to block very obvious hacking vector attacks. You can of course add additional htaccess security rules using the BPS htaccess File Editor and the Custom Code features. BPS is not a replacement for ModSecurity CRS. You can use both together or just use BPS if you are running into a lot of problems with ModSecurity blocking legitimate things.

    BPS Pro has an additional htaccess firewall that protects the WordPress Plugins folder > https://forum.ait-pro.com/forums/topic/plugin-firewall-read-me-first-troubleshooting/

    • This reply was modified 1 year, 2 months ago by AITpro.
    • This reply was modified 1 year, 2 months ago by AITpro.
    Plugin Author AITpro

    (@aitpro)

    Assuming all questions have been answered – the thread has been resolved. If the issue/problem is not resolved or you have additional questions about this specific thread topic then you can post them at any time. We still receive email notifications when threads have been resolved.

Viewing 4 replies - 1 through 4 (of 4 total)
  • The topic ‘WAF firewall’ is closed to new replies.