Question Firewall and other updates

[kek]

Server operating system version

Ubuntu 22.04

Plesk version and microupdate number

18.0.59

Hi, using DO and Plesk. Setting things up but got confused on these, and cannot decide.

1. If I turn off the Web Application Firewall in Plesk and install Wordfence and the site is behind Cloudflare, will it be okay? In Cloudflare, I have created WAF rules to block threat scores over 40 and blocked XMLRPC, logins, etc.

2. Is it necessary to change the default port 22?

3. Are these updates necessary?

Screenshot:

https://imgur.com/zH1arie

 

[Peter Debik]

Hi, using DO and Plesk. Setting things up but got confused on these, and cannot decide.

1. If I turn off the Web Application Firewall in Plesk and install Wordfence and the site is behind Cloudflare, will it be okay? In Cloudflare, I have created WAF rules to block threat scores over 40 and blocked XMLRPC, logins, etc.

Why disable WAF?

2. Is it necessary to change the default port 22?

No.

3. Are these updates necessary?

Yes, updates are always necessary.

 

[kek]

Why disable WAF?

Kinda complex for me. I am used to Wordfence, that's why. Wordfence is also good right?

 

[Peter Debik]

Wordfence is good, yes.