How to Enable or Disable ModSecurity in Plesk?
Last updated
Last updated
If you find that your website is displaying a 403, 405, 406 error, it is very likely that some element of your site is being blocked by a ModSecurity rule.
ModSecurity is a web application firewall. What it does is block certain requests or code executions that it considers dangerous. You can configure ModSecurity to allow or block certain executions, as required by your website.
In the Plesk control panel, you can access the ModSecurity configuration by following these steps:
In the main menu of your account within Plesk, go to Web Application Firewall.
The first options will allow you to disable or enable ModSecurity or enable it in detection only mode. In this mode, it will generate detection logs but will not block the execution of the website.
Below, you will find the configuration of the ModSecurity rules. This is an advanced section and should only be configured by the webmaster or specialized technician.
Once you have made a change in the ModSecurity configuration, you will need to save the changes by pressing the OK button.
