Recommended Security Settings for Plesk Pane 11.05 l on Linux Ubuntu

[christyl]

Hi,

Does anyone wants to share on the Security Settings for Plesk Panel 11.05 setup on Linux Ubuntu. I read a lot that using cpanel of any types are not safe, and was told that only using SSH and myphpadmin are safe .

I really appreciate anyone suggestions on air-tight or recommendation on any security settings that is viable. Can someone suggest a good server management company who can handles server administration and does enhanced security settings.

or

some site scanning security providers or SSL providers or beyond security or cloudfare or incapsula?

Really Appreciate everyone thoughts and feedback.

Thanks

Chris

 

[abdi]

Can someone suggest a good server management company who can handles server administration and does enhanced security settings.

http://www.jolis.net/packages.php?spt=3

 

[Lloyd_mcse]

Well, depending on what you'll be using Plesk for...

Plesk
Restrict Admin Access to your home and office broadband IP address/es (obviously not possible if you have Plesk customers.)
Enforce Strong Passwords
Use FTPS Only

SSH
Set up authorized keys
Disable Passwords

PHPMyAdmin
I think is only available through the Plesk Panel, so no direct links to it.

Scanning
COMODO
McAfee

SSL Scanning
Qualys

Certificates
RapidSSLOnline
Cheap, Choice of SHA1 and SHA256 2048bit
COMODO
Fairly cheap, Free upgrade to EV SSL's, EV's can be 4096Bit with SHA256

That should help get you started anyway.
Qualys also has a lot of info about PCI Compliant Ciphers you can use on Apache and Nginx and then on your mail servers.
Anyway I hope that helps a bit.
Kind regards

Lloyd

 

[IgorG]

Parallels Plesk Panel security best practices - http://kb.parallels.com/114620