Question Am I safe with Comodo WAF ModSecurity?

[safemoon]

Hello,

I've noticed that ModSecurity's free waf has many false positives (especially for font files). Sometimes it also blocks simple INSERT sql queries which makes the development work a bit harder.

To make the applications run properly I have exluded the following rules
210710
222212
220030
241171

1) Is my server still protected after disabling all these rules? Should i be worried?
2) Is there any other alternative to mod security's waf?

 

[safemoon]

@Peter Debik
sorry wrong section, can someone move it to the obsidian plesk forum?

 

[safemoon]

one more security rule i had to disable for my webapp to function properly:

211820 - for some reason this rule didnt let me to insert a new row to my db table through adminer.php

 

[safemoon]

still dont know if its safe to disable those rules

 

[safemoon]

anyone?

 

[Kaspar]

It's a bit of a difficult question to answer. Generally speaking it's certainly not unsafe to disable specific WAF rule. I would definitely not let the security of an application or website solely rely on any type of WAF. Instead make sure the application or website is considered safe and up to date with the latest (security) version. Consider a WAF as an extra layer of security to tighten the applications own security.

The Comodo rulesets is rather generic and as a result can have many false positives for specific applications. I guess that the trade off.