• We value your experience with Plesk during 2024
    Plesk strives to perform even better in 2025. To help us improve further, please answer a few questions about your experience with Plesk Obsidian 2024.
    Please take this short survey:

    https://pt-research.typeform.com/to/AmZvSXkx
  • The Horde webmail has been deprecated. Its complete removal is scheduled for April 2025. For details and recommended actions, see the Feature and Deprecation Plan.
  • We’re working on enhancing the Monitoring feature in Plesk, and we could really use your expertise! If you’re open to sharing your experiences with server and website monitoring or providing feedback, we’d love to have a one-hour online meeting with you.

Security Hardening - Plesk 11.5 on CentOS 6

Bluedog

New Pleskian
Hi,

I just started with CentOS and Plesk and I am trying to setup everything to be secure as much as possible :) And I would like to ask you if you can share some tips and tricks with me.
Because I am not sure if firewall at Plesk is secure enough or do I have to install fail2ban and IPtables etc.

Thanks a lot for any tips.
 
Hello,

I will suggest you install following plugin on your server in the security purpose

Install CSF/APF firewall
Install LMD (Linux Malware Detect )
And mod_security
 
Check out Atomic Secured Linux, a security suite designed for Plesk environments (we are the founders of Plesk!). https://www.atomicorp.com/products/asl.html

We also have a number of security application available in the Atomic repo, including the openvas vulnerability scanner. I highly recommend it for verifying your security controls.
 
Hello,

I will suggest you install following plugin on your server in the security purpose

Install CSF/APF firewall
Install LMD (Linux Malware Detect )
And mod_security

Thanks for the tips! I just need to setup CSF correctly ;)
 
Yes, Install CSF and configured it correctly on your server

With the LMD you can scan your users website through command prompt, Maldet is a good scanner for the shell scripts scanning and through mod_sec you can prevent lot of web attack and sql injection
 
Back
Top