ModSecurity Vendors

[support]

The 1.1.3-3 update that was just released has installed and enabled the OWASP and a new Imunify360 ModSecurity vendor rule set.

I was already using Comodos ModSecurity vendor rule set, so will it create any problems also enabling OWASP and Imunify360 as well? I assume Comodos rules should cover most things in OWASP already?

[apb]

Ryan,

Yes, enabling OWASP rules in blocking mode may lead to higher false positive rate. Id recommend to disable OWASP ruleset if you are already using Comodo rules for blocking.
We are working on a solution for this problem to be added in one of the following versions.

[admin]

Yeah, Ive already disabled it. You may not want to automatically enable it without alerting the user if other rulesets are already installed.