Can I enable Imunify360 for selected users only?

Issue

A customer may want to have Imunify360 for selected users only. Is it possible to disable Imunify360 for certain accounts/domains?

Environment

• Imunify360
• Any control panel.
• Any OS.

Solution

Imunify360 has a variety of components that can be enabled or disabled. While some components of Imunify360 can be managed on a per-user or per-domain basis, other operate on a server level and cannot be disabled or easily adjusted. Nonetheless, even with adjustments in mind, Imunify360 doesn't have this feature out-of-the-box:

1. Web Application Firewall (WAF): This module can be enabled or disabled for individual users or domains. You can do this through the Imunify360 interface in the WAF settings.

2. Proactive Defense: This feature can be enabled or disabled on a per-user basis. However, it's worth noting that this doesn't fully disable the feature for a user, but rather gives the user freedom to act on detections.

3. Malware Cleanup (Malware Database Scanner): This feature can be adjusted to exclude all other user's paths from background scans by watch patterns, also by adding ignore paths for on-demand scans. Although, this is not guaranteed that this measure remain stable, as it is not intended usage of the product. 

4. Iptables Firewall: This module operates at the server level and can't be enabled or disabled for individual users. It's designed to provide a base level of protection for the entire server.

5. WebShield: This feature operates on a server-wide basis and can't be disabled for individual users. It works by redirecting traffic to the internal proxy for spam and bot protection.

6. Active Response (Ossec): This feature operates on a server-wide basis and can't be disabled for individual users.

7. Bruteforce Protection (PAM): This feature also operates on a server-wide basis, and although it allows to exclude certain users from being blocked, it will require whitelisting and thoughtful adjustments.

Lastly, regarding licensing, Imunify360 package also does not currently provide the functionality to enable or disable it on a per-user basis. The count of users for licensing purposes comes from the environment for known panels like cPanel or Plesk. For Stand-Alone installations, the count is based on integration scripts.

Cause

Imunify360 package is intended to protect all the accounts on the server and prevent malware spread.

Useful links

• https://blog.imunify360.com/
• Accounts/domains exclusion from the Imunify protection
• What does a "user" mean when buying a license? Types of licenses
• License is invalid for this server. How to count the number of existing users on the server? 
• https://secure.site