Imunify360 UI warning: ModSecurity works in DetectionOnly mode. Set SecRuleEngine directive to On

Issue

Imunify360 UI warning: ModSecurity works in DetectionOnly mode. Set SecRuleEngine directive to On state to keep your server protected.

Environment

• Imunify360
• Plesk
• CentOS

Solution

In order to turn on ModSecurity in Plesk environment, please navigate to the WAF settings and select On, as per https://docs.imunify360.com/ids_integration/#plesk:

Cause

Presumably there is the Detection only mode enabled in your ModSecurity (WAF) configuration.

Useful links

• https://docs.imunify360.com/ids_integration/#plesk