How to verify that ModSecurity works on the server?

Issue

How to verify that ModSecurity works on the server?

Environment

• Imunify360
• ModSecurity
• Any supported OS

Solution

Perform the following request which triggers a test rule

curl -v http://example.com//?i360test=88ff0adf94a190b9d1311c8b50fe2891c85af732

Replace example.com with the domain from the test server. After a few request, you will get such entries in the log /var/log/imunify360/console.log:

grep 'IM360 WAF: Testing the IM360 ModSecurity ruleset' /var/log/imunify360/console.log

Useful links

• https://docs.imunify360.com/faq_and_known_issues/#_15-how-to-check-modsecurity-scan-works