WordFence Central questions

  • John-Pierre Cornelissen

    (@jpnl)


    5 years, 2 months ago

    Hi,

    I am testing WordFence central. I created a template based on a site and want to apply it to another site and I have a few questions.

    1) It says the follwing value has been changed. What value is it? Looks like the correct label is missing:
    touppPromptNeeded / boolean / Off

    2) How do you deal with settings that are site specific? For example:
    » Exclude files from scan that match these wildcard patterns (one per line)
    On some of my sites it looks like WF has added files to exclude. Is there a way to sync or not sync that value?

    » Immediately block the IP of users who try to sign in as these usernames
    There are domain specific user names that are used in brute force attacks, like domain, admindomain, admin_domain etc. It’s not possible to apply a template without loosing the local user names. An option to use wildcards in the template would be usefull.

    3) The search option doesn’t work well. If you search in WordPress, it scrolls to and expands the toggle that holds the setting. In WF Central, it just scrolls and then doesn’t expand the toggle, it doesn’t even show which toggle you need to open.

    4) Is this going to evolve into a full WP management platform, like InfiniteWP and ManageWP? That would be awesome!

    Thanks
    JP

    The page I need help with: [log in to see the link]

Viewing 3 replies - 1 through 3 (of 3 total)
  • Thread Starter John-Pierre Cornelissen

    (@jpnl)

    5 years, 1 month ago

    Did WordFence staff stop monitoring this support forum?

    ramwf

    (@ramwf)

    5 years ago

    Hi!

    I’m afraid we’ve been a bit behind on forum topics and are just catching up.
    Question #1: it looks like that should have been addressed in a recent release – let us know if you’re still seeing it please.

    For Question #2: I’m afraid that there’s no way to simultaneously use a template and have site-specific values for things like wildcard exclusion patterns, though we welcome suggestions on how to improve this.

    To answer Question #3: We’ve actually got a bug in for this and hope to have it fixed in an upcoming release.

    To answer Question #4: We’re still in the early stages of Wordfence Central, but this is definitely something that’s come up for consideration. While I can’t tell you what our plans are in that direction, we’ll continue to improve Wordfence Central and to make it as useful as possible.

    Thread Starter John-Pierre Cornelissen

    (@jpnl)

    5 years ago

    Hi and thank you for your reply!

    Suggestions regarding 2

    “Exclude files from scan that match these wildcard patterns”
    I am not sure when the “Exclude files from scan that match these wildcard patterns” gets populated on individual sites, but I have multiple sites, mostly with the same theme and plugins, but this value is different on several of them.
    Is this populated when you do something on a site that triggers the ‘blocked action’ popup allowing you to white list that action?

    » Suggestion: have a template option to specify that the setting shouldn’t be synced to individual sites. It could be a checkbox, or simply write * in that template field.

    » Immediately block the IP of users who try to sign in as these usernames”
    Brute force attacks often contain parts of the domain name which is site specific.

    » Suggestion: accept placeholders hat can be used to specify usernames like this:
    [domain] that evaluates as the websites domain name
    [tl] that evaluates as the websites domain extension
    [domain][tl]
    admin[domain]
    http://www.[domain][tl]
    » would resolve into: http://www.wordfence.com

    Thanks
    JP

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘WordFence Central questions’ is closed to new replies.