Facebook
Twitterpleskuser67553
Regular Pleskian
- Server operating system version
- CentOS Linux 7.9.2009 (Core) or AlmaLinux 9.8 (Olive Jaguar)
- Plesk version and microupdate number
- Plesk Obsidian 18.0.80 Update #7
I'm frequently receiving email notifications with the subject "Outdated or vulnerable software discovered - Action Required [...]", and sometimes with the subject "Vulnerabilities found on your Server - Action Required [...]". These emails appear to be generated by the Imunify extension.
99% of the time these emails are sent after an automatic update has already been applied to bring the software up to date, such that the information in these emails is incorrect, and bizarrely sometimes many hours after the fact.
At the bottom of the email it's signed by the "Imunify360 Security Team" with a link to "Manage subscriptions" which goes to a fairly basic blog post https://blog.imunify360.com/how-to-manage-imunify-security-notifications/ information of which does not appear to apply to settings or CLI available in Plesk.
There appears to be no granular control in the UI. I can see at the URL of my servers /admin/notifications/email-settings that I can disable Imunify notifications, however, this seems to be a blunt on/off. I would still like to receive a notification for when a scan has actually found malware, which, for me, has been the only useful notification from Imunify so far...
99% of the time these emails are sent after an automatic update has already been applied to bring the software up to date, such that the information in these emails is incorrect, and bizarrely sometimes many hours after the fact.
At the bottom of the email it's signed by the "Imunify360 Security Team" with a link to "Manage subscriptions" which goes to a fairly basic blog post https://blog.imunify360.com/how-to-manage-imunify-security-notifications/ information of which does not appear to apply to settings or CLI available in Plesk.
There appears to be no granular control in the UI. I can see at the URL of my servers /admin/notifications/email-settings that I can disable Imunify notifications, however, this seems to be a blunt on/off. I would still like to receive a notification for when a scan has actually found malware, which, for me, has been the only useful notification from Imunify so far...
