Question ModSecurity Apache vs. Nginx and Comodo Free

[AlwaysTroubleshooting]

Server operating system version

Ubuntu 24.04.4 LTS

Plesk version and microupdate number

Plesk Obsidian 18.0.77 Update #2

Hello all,

In Plesk Web Application Firewall (ModSecurity), does it matter if I choose Apache or Nginx and all of my websites are using Nginx?
I ask because Comodo Free with Nginx selected will not function. So I had to use Apache w/ Comodo Free and it works.

For Nginx Comodo Free I get:
"modsecurity_ctl failed: Failed to download the Comodo rule set. The issue is on side of waf.comodo.com and we will alert them right away. You can also report the issue on the Comodo forum - Web Application Firewall -Free Modsecurity rules . That way you may help to fix the issue sooner. At the moment, please select another available rule set and try to switch to Comodo later."

However, it appears this has been an issue for a long time now.

Why does it work with Apache but not Nginx?

If a website is using Nginx... I imagine ModSecurity with Apache does not benefit the website using Nginx, correct?

 

[Sebahat.hadzhi]

Hi, @AlwaysTroubleshooting . When you say all your websites are using Nginx I am assuming that you mean Apache + Nginx in proxy mode. If that's the case, Apache still sits behind Nginx and you can take advantage of the rules, especially for PHP-based sites.

The issue you are experiencing has been already reported to Comodo, but, unfortunately, no action has been taken so far.