Security
The web application firewall, malware scanner, server firewall, account isolation and the panel-wide activity log.
The Security group protects the server and keeps customer accounts apart. It covers the web application firewall in front of every website, the malware scanner, the server's own firewall and fail2ban bans, how strongly accounts are isolated from each other, and a log of every change made in the panel.
Where: Server Admin › Security
| Screen | What it is for |
|---|---|
| Security overview | The web firewall's mode for the whole server, the malware scanner, its findings, and each website's firewall. |
| Malware | The server's malware policy (report, quarantine or clean), schedule, skipped paths, every account's findings and the quarantine. |
| Web firewall control | Whether customers may switch their websites' firewall off or let rules through, by default and per package. |
| Firewall | Open ports, block IP addresses from the whole server, and lift fail2ban bans. |
| Account isolation | What each hosting account can see, use and run on the server, checked before every change. |
| Activity log | Every change made in the panel: who, what and from where. |
| Abuse desk | Collect abuse complaints from email, a public form and the API, link them to accounts, notify customers and suspend with one click. |
| Site firewall rules | See every website's firewall rules, edit any of them, and import the country list that country blocking uses. |
| Two-step sign-in | Make two-step sign-in optional or required for administrators, team members, resellers and customers, with a grace period, and reset it. |
All screens in this group are for administrators only. Customers have their own Malware and Web firewall screens in the Control Panel.