Security

ModSecurity for IIS with OWASP Core Rule Set on Windows Server

Web application firewall module for IIS (ModSecurity 2.9) with the current OWASP Core Rule Set 4. Starts in detection-only mode.

Price
Included in every license
Group
Security
Managed by
StackRegent

What StackRegent does with it

StackRegent writes its configuration, chooses the mode per website and shows the log of what it caught.

Installing it

Open Tools & Settings › Server Components in the administrator panel. The panel downloads the installer from its maker, checks it (SHA-256 sums or the Microsoft signature) before it runs, and shows the progress in the task list. Removing a component is done from the same page and leaves websites that do not use it untouched.

Read the Server Components chapter in the Administrator Guide.