• Halloween is coming! To celebrate the occasion, we dusted off a couple of old skins, and even created a brand new one (Pixel).
    To get into the festive spirit, install the Skins extension.
  • The new Python extension is now available. It allows customers to deploy and manage WSGI-based Python applications on their websites directly from Plesk.
  • The Plesk Mobile apps for iOS and Android and the Plesk Mobile Center extension have been deprecated, and are no longer available for new installations. In Plesk Obsidian 18.0.84, the Plesk Mobile Center extension will be removed from servers during the upgrade, and the Plesk Mobile apps will lose their server management features.
  • The Social Login extension has been deprecated and will be removed in Plesk Obsidian 18.0.84. After that, it will no longer be possible to log in to Plesk with a Google, Facebook, GitHub account, or with a passkey. Plesk usernames and passwords, as well as logging in with a WebPros Account, are not affected.

Issue Imunify 360 ext breaks webmail secure access when no domain website hosting

T

TomBoB

Silver Pleskian
Server operating system version
AlmaLinux 8.10
Plesk version and microupdate number
18.0.80 #3
Domain subscription with no website hosting selected, only email set up. Secured with Lets Encrypt. Plesk Email Security extension loaded (in case it matters). Free Imunify extension loaded.
Webmail can be accessed on http and https, no issues.
Upgrade Imunify Free to Imunify 360. Wait the length of time until Apache [setup: Nginx as a proxy in front of Apache] has restarted. 600 secs on our case. Result: Security cert for webmail.clientdomain.com is not recognized, instead the servers main security cert is provided, leading to a security warning. Ignoring that, no access to webmail is provided as HSTS is enabled and blocks access completely.
Removing the license, then removing the extension and replacing it with the free Imunify version restores access to webmail.

Can anyone confirm? Do I need to file a bug report?
 
Hi, no, we're not using Plesk Premium Email. Just the standard built-in mail features. Plus PES.
 
Thank you for the confirmation. Could you please double-check if the correct SSL (Websites & Domains > example.com > SSL/TLS Certificates) is still selected after Imunify360 is enabled? Also, please run the following command and let me know if any errors are detected:

Code: 
plesk repair web domain.com -n

Thanks in advance.
 
Thanks for the input. Will have to check and troubleshoot one of this evenings when it's not busy. Will revert. :)
 
You must log in or register to reply here.

Similar threads

T
Question checking for outdated/obsolete panel.ini options
Replies
4
Views
4K
TomBoB
T
T
Question Secure mail.customerdomain.com with Let's Encrypt certificate with no hosting
Replies
14
Views
8K
Kaspar
K
revisium
Input Revisium Antivirus for Websites
Replies
17
Views
17K
Chris Wokes
C
I
An intro to Plesk Security Course: Part 3 [Video]
Replies
0
Views
2K
Ivan Butorin
I
Matt N
Question WordPress Multi-sites slow - single WordPress sites fine. ideas?
Replies
4
Views
10K
mmyeah-at-pm-dot-me
M
Back
Top