{"id":17680,"date":"2026-08-04T14:07:47","date_gmt":"2026-08-04T13:07:47","guid":{"rendered":"https:\/\/www.milesweb.co.uk\/hosting-faqs\/?p=17680"},"modified":"2026-08-04T14:07:48","modified_gmt":"2026-08-04T13:07:48","slug":"how-to-enable-waf-in-plesk","status":"publish","type":"post","link":"https:\/\/www.milesweb.co.uk\/hosting-faqs\/how-to-enable-waf-in-plesk\/","title":{"rendered":"How to Enable WAF in Plesk?"},"content":{"rendered":"\n

Plesk includes ModSecurity as its native web application firewall. The extension checks each incoming request against a signature database. It blocks anything matching a known attack before your website ever sees it. Most admins turn the feature on right after a fresh Plesk install. Some administrators enable it only after a security review identifies the vulnerability. This walkthrough covers the full setup, from installation to a working test.<\/p>\n\n\n\n

How Do You Turn On WAF in Plesk?<\/h2>\n\n\n\n

Step 1: Locate the Extensions Menu<\/h3>\n\n\n\n

Log into your Plesk panel. Click Extensions in the left sidebar. The catalog loads within seconds. Please ensure your account has admin rights, since extension installs need that level of access.<\/p>\n\n\n\n

Step 2: Install the ModSecurity Extension<\/h3>\n\n\n\n

Locate ModSecurity in the list. Click Install. Plesk pulls the module and configures it for you. No terminal work needed.<\/p>\n\n\n\n

Step 3: Access WAF Settings<\/h3>\n\n\n\n

Open Tools & Settings. Look for the Web Application Firewall<\/strong><\/a> (ModSecurity) under Security. Some license tiers place it elsewhere, so check Extensions too if it’s missing. This panel holds every WAF setting, so bookmark it if you manage more than one server.<\/p>\n\n\n\n

Step 4: Choose a Rule Set<\/h3>\n\n\n\n

Pick between Atomic Basic and Comodo. Comodo covers more attack types. Sites running several plugins or applications benefit most from that wider coverage. Atomic Basic fits smaller, simpler setups. You can switch between the two later without any downtime.<\/p>\n\n\n\n

Step 5: Pick an Operation Mode<\/h3>\n\n\n\n

Set the mode to On for immediate blocking. Set it to detect your traffic, such as a contact form being incorrect. New websites benefit from a few days of detection only at first. This process reveals which rules are ineffective on your traffic, such as a contact form being incorrect, before you switch to full enforcement. <\/p>\n\n\n\n

Related Read: How to Enable and Disable ModSecurity Rules with DirectAdmin?<\/a>
<\/strong><\/p>\n\n\n\n

Step 6: Apply Settings Server-Wide or Per Domain<\/h3>\n\n\n\n

Decide the reach. A server-wide rule hits every domain you host. A per-domain rule overrides the server-wide rule for a specific website. Use per-domain rules when one client runs a CMS that trips the default ruleset or a payment app that needs stricter checks than the rest of your domains.<\/p>\n\n\n\n

Step 7: Save and Confirm Activation<\/h3>\n\n\n\n

Click Apply. Reload the settings page manually. A successful save turns the status field to On. A field still showing Off means the rule set or mode didn’t register. Reselect both, then click Apply again.<\/p>\n\n\n\n

Step 8: Test the Firewall<\/h3>\n\n\n\n

Send a mock attack request. A standard SQL injection string appended to a URL works well for this test. Watch for the block. Then check the ModSecurity logs to confirm the entry matches what you just triggered.<\/p>\n\n\n\n

Related Read: How to Monitor WAF Logs?<\/a><\/strong><\/p>\n\n\n\n

Concluding Note<\/h2>\n\n\n\n

A WAF only works while you maintain it. Please review the logs on a regular schedule. If a rule mistakenly blocks a real visitor, whitelist that specific rule. Update the rule set as new threats appear. Skip this upkeep, and protection quietly fades into a checkbox nobody revisits.<\/p>\n","protected":false},"excerpt":{"rendered":"

Plesk includes ModSecurity as its native web application firewall. The extension checks each incoming request against a signature database. It blocks anything matching a known attack before your website ever sees it. Most admins turn the feature on right after a fresh Plesk install. Some administrators enable it only after a security review identifies the […]<\/p>\n","protected":false},"author":35,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[867],"tags":[],"class_list":["post-17680","post","type-post","status-publish","format-standard","placeholder-for-hentry","category-firewall"],"yoast_head":"\nHow to Enable WAF in Plesk?<\/title>\n<meta name=\"description\" content=\"Learn how to enable WAF in Plesk to protect your website from common web threats and strengthen security with simple configuration steps.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.milesweb.co.uk\/hosting-faqs\/how-to-enable-waf-in-plesk\/\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"How to Enable WAF in Plesk?\" \/>\n<meta property=\"og:description\" content=\"Learn how to enable WAF in Plesk to protect your website from common web threats and strengthen security with simple configuration steps.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.milesweb.co.uk\/hosting-faqs\/how-to-enable-waf-in-plesk\/\" \/>\n<meta property=\"og:site_name\" content=\"Web Hosting FAQs by MilesWeb\" \/>\n<meta property=\"article:published_time\" content=\"2026-08-04T13:07:47+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-08-04T13:07:48+00:00\" \/>\n<meta name=\"author\" content=\"Jackson Lane\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Jackson Lane\" \/>\n\t<meta name=\"twitter:label2\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.milesweb.co.uk\/hosting-faqs\/how-to-enable-waf-in-plesk\/\",\"url\":\"https:\/\/www.milesweb.co.uk\/hosting-faqs\/how-to-enable-waf-in-plesk\/\",\"name\":\"How to Enable WAF in Plesk?\",\"isPartOf\":{\"@id\":\"https:\/\/www.milesweb.co.uk\/hosting-faqs\/#website\"},\"datePublished\":\"2026-08-04T13:07:47+00:00\",\"dateModified\":\"2026-08-04T13:07:48+00:00\",\"author\":{\"@id\":\"https:\/\/www.milesweb.co.uk\/hosting-faqs\/#\/schema\/person\/1f580bdff0fa81720fae0fd0c3919758\"},\"description\":\"Learn how to enable WAF in Plesk to protect your website from common web threats and strengthen security with simple configuration steps.\",\"breadcrumb\":{\"@id\":\"https:\/\/www.milesweb.co.uk\/hosting-faqs\/how-to-enable-waf-in-plesk\/#breadcrumb\"},\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.milesweb.co.uk\/hosting-faqs\/how-to-enable-waf-in-plesk\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.milesweb.co.uk\/hosting-faqs\/how-to-enable-waf-in-plesk\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.milesweb.co.uk\/hosting-faqs\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"How to Enable WAF in Plesk?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.milesweb.co.uk\/hosting-faqs\/#website\",\"url\":\"https:\/\/www.milesweb.co.uk\/hosting-faqs\/\",\"name\":\"Web Hosting FAQs by MilesWeb\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.milesweb.co.uk\/hosting-faqs\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-GB\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.milesweb.co.uk\/hosting-faqs\/#\/schema\/person\/1f580bdff0fa81720fae0fd0c3919758\",\"name\":\"Jackson Lane\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/www.milesweb.co.uk\/hosting-faqs\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/dd43b6ec8f85bdee32ceaac59c48807f?s=96&d=blank&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/dd43b6ec8f85bdee32ceaac59c48807f?s=96&d=blank&r=g\",\"caption\":\"Jackson Lane\"},\"description\":\"I am an experienced Marketing Manager at MilesWeb UK, a leading web hosting company in the UK. With extensive knowledge in web hosting, WordPress, digital marketing, and web development, I'm committed to helping businesses succeed online. His expertise and enthusiasm for the digital world make him a valuable asset in the constantly changing field of online marketing.\",\"url\":\"https:\/\/www.milesweb.co.uk\/hosting-faqs\/author\/jackson-lane\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"How to Enable WAF in Plesk?","description":"Learn how to enable WAF in Plesk to protect your website from common web threats and strengthen security with simple configuration steps.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.milesweb.co.uk\/hosting-faqs\/how-to-enable-waf-in-plesk\/","og_locale":"en_GB","og_type":"article","og_title":"How to Enable WAF in Plesk?","og_description":"Learn how to enable WAF in Plesk to protect your website from common web threats and strengthen security with simple configuration steps.","og_url":"https:\/\/www.milesweb.co.uk\/hosting-faqs\/how-to-enable-waf-in-plesk\/","og_site_name":"Web Hosting FAQs by MilesWeb","article_published_time":"2026-08-04T13:07:47+00:00","article_modified_time":"2026-08-04T13:07:48+00:00","author":"Jackson Lane","twitter_misc":{"Written by":"Jackson Lane","Estimated reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.milesweb.co.uk\/hosting-faqs\/how-to-enable-waf-in-plesk\/","url":"https:\/\/www.milesweb.co.uk\/hosting-faqs\/how-to-enable-waf-in-plesk\/","name":"How to Enable WAF in Plesk?","isPartOf":{"@id":"https:\/\/www.milesweb.co.uk\/hosting-faqs\/#website"},"datePublished":"2026-08-04T13:07:47+00:00","dateModified":"2026-08-04T13:07:48+00:00","author":{"@id":"https:\/\/www.milesweb.co.uk\/hosting-faqs\/#\/schema\/person\/1f580bdff0fa81720fae0fd0c3919758"},"description":"Learn how to enable WAF in Plesk to protect your website from common web threats and strengthen security with simple configuration steps.","breadcrumb":{"@id":"https:\/\/www.milesweb.co.uk\/hosting-faqs\/how-to-enable-waf-in-plesk\/#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.milesweb.co.uk\/hosting-faqs\/how-to-enable-waf-in-plesk\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.milesweb.co.uk\/hosting-faqs\/how-to-enable-waf-in-plesk\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.milesweb.co.uk\/hosting-faqs\/"},{"@type":"ListItem","position":2,"name":"How to Enable WAF in Plesk?"}]},{"@type":"WebSite","@id":"https:\/\/www.milesweb.co.uk\/hosting-faqs\/#website","url":"https:\/\/www.milesweb.co.uk\/hosting-faqs\/","name":"Web Hosting FAQs by MilesWeb","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.milesweb.co.uk\/hosting-faqs\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-GB"},{"@type":"Person","@id":"https:\/\/www.milesweb.co.uk\/hosting-faqs\/#\/schema\/person\/1f580bdff0fa81720fae0fd0c3919758","name":"Jackson Lane","image":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/www.milesweb.co.uk\/hosting-faqs\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/dd43b6ec8f85bdee32ceaac59c48807f?s=96&d=blank&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/dd43b6ec8f85bdee32ceaac59c48807f?s=96&d=blank&r=g","caption":"Jackson Lane"},"description":"I am an experienced Marketing Manager at MilesWeb UK, a leading web hosting company in the UK. With extensive knowledge in web hosting, WordPress, digital marketing, and web development, I'm committed to helping businesses succeed online. His expertise and enthusiasm for the digital world make him a valuable asset in the constantly changing field of online marketing.","url":"https:\/\/www.milesweb.co.uk\/hosting-faqs\/author\/jackson-lane\/"}]}},"views":0,"_links":{"self":[{"href":"https:\/\/www.milesweb.co.uk\/hosting-faqs\/wp-json\/wp\/v2\/posts\/17680","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.milesweb.co.uk\/hosting-faqs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.milesweb.co.uk\/hosting-faqs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.milesweb.co.uk\/hosting-faqs\/wp-json\/wp\/v2\/users\/35"}],"replies":[{"embeddable":true,"href":"https:\/\/www.milesweb.co.uk\/hosting-faqs\/wp-json\/wp\/v2\/comments?post=17680"}],"version-history":[{"count":2,"href":"https:\/\/www.milesweb.co.uk\/hosting-faqs\/wp-json\/wp\/v2\/posts\/17680\/revisions"}],"predecessor-version":[{"id":17682,"href":"https:\/\/www.milesweb.co.uk\/hosting-faqs\/wp-json\/wp\/v2\/posts\/17680\/revisions\/17682"}],"wp:attachment":[{"href":"https:\/\/www.milesweb.co.uk\/hosting-faqs\/wp-json\/wp\/v2\/media?parent=17680"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.milesweb.co.uk\/hosting-faqs\/wp-json\/wp\/v2\/categories?post=17680"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.milesweb.co.uk\/hosting-faqs\/wp-json\/wp\/v2\/tags?post=17680"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}