1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465 |
- # cd /usr/local/src
- # wget https://waf.comodo.com/cpanel/cwaf_client_install.sh
- # chmod 755 cwaf_client_install.sh
- #./cwaf_client_install.sh
- Choose type of installation:
- 1) Cpanel installation
- 2) Standalone scripts
- Choose [1|2]: 1
- Step 2
- Enter the login credentials for CWAF
- Enter CWAF connection data
- ————————–
- Enter CWAF user: gopkris2000
- Enter CWAF password: password
- Step 3
- Modify Apache Web Server configuration to enable ‘mod_security‘ module and include CWAF Rules, by adding the key ‘Include /var/cpanel/cwaf/etc/cwaf.conf‘ to /usr/local/apache/conf/modsec2.conf
- Add this string to Apache HTTPD Mod_security config in your system:
- Include “/var/cpanel/cwaf/etc/cwaf.conf”
- and reload Apache
- Installation complete!
- Restart Apache server
- #service httpd restart
- The agent is installed on the server with a cPanel plugin for CWAF.
- Using the Agent to download and deploy firewall rule sets
- • Run the CWAF console tool:
- /var/cpanel/cwaf/scripts/updater.pl
- cPanel Plug-in for Firewall Configuration
- CWAF CPanel plug-in allows the administrator to view and modify the web application firewall configuration, update the rule sets, configure rules to be excluded from the currently loaded rule set and to submit feedback to Comodo on the currently loaded rule set version.
- To access the CWAF cPanel plugin
- Login to cPanel on your server
- Click ‘Plugins’ > “Comodo WAF Control“.
-
- Uninstalling the CFMSR Agent
- The CWAF is installed at the path /var/cpanel/cwaf by defualt.
- To uninstall CWAF Agent,
- Run the script ‘bash /var/cpanel/cwaf/scripts/uninstall_cwaf.sh‘
- Do you want to remove Comodo WAF application?
- Enter answer [y/n] y
- Please don’t forget to remove string “Include /var/cpanel/cwaf/etc/cwaf.conf” from file /usr/local/apache/conf/modsec2.conf
- and reload Apache
- #service httpd restart
- Comodo WAF uninstalled!
- The agent will be removed from the server.
|