Author: iManila Support

Overview

imunify360 is a complete Six-Layer Security that is installed to iManila shared servers. It protects our websites from different digital attacks. Imunify360 is an automated security solution, powered by AI and Proactive Defense, that will protect your web servers from infections, maintain secure kernels, and keep you in the know with relevant information.

• Advance Firewall
  Imunify360 offers advanced firewall protection that uses cloud heuristics and artificial intelligence to detect new threats and protect the servers that run the software. The firewall is capable of defending against brute force attacks, DoS attacks, and port scans.

  The firewall tightly integrates with mod_security web application firewalls to dramatically enhance its usefulness. In combination with WAF, we can stop the majority of web application attacks even before they start. An advanced Captcha system is employed to reduce false positives and make sure that valid customers can reach your website.

• Intrusion Detection and Protection System (IDS)
  Imunify360 features an excellent Intrusion Prevention System (IPS) with a comprehensive collection of “deny” policy rules to quickly block all known attacks, especially those using a common or well-known exploit tool.

  The Intrusion Detection System (IDS) provides excellent visibility of server security by monitoring server logs. It scans log files from all different angles and bans IPs that show malicious signs, such as password failures, potential exploits, etc. It helps protect your server from attacks and reports to the Imunify360 dashboard.
• Malware Detection
  Over 68% of hosting providers say that malware infection is a top issue for their customers’ web servers.

  Imunify360 automatically scans file systems for malware injection and quarantines infected files.
  
  

• Proactive Defense
  Imunify360’s Proactive Defense (previously known as Sandboxing) protects websites against zero-day attacks – it stops even the malware that no scanner is able to detect. It identifies attacks on your Linux web servers in real time, then blocks potentially malicious executions automatically and with zero latency.

  Proactive Defense uses a unique method of identifying security risks – it analyzes what scripts do rather than what is actually in the code.

  
  image from imunify360.com

• Patch Management
  
  Rebootless Secure Kernel
  Rebootless Secure Kernel powered by KernelCare is a component that keeps your server secure by automatically patching kernels without having to reboot the server. Its agent checks for new patches every four hours and automatically applies them to the running server without any performance impact. KernelCare keeps your kernel updated to help you avoid disastrous incidents.

  Hardened PHP
  Hardened PHP is a component that ensures your web server security by patching all PHP versions against known vulnerabilities, allowing you to run any version of PHP without having to update programs to accommodate newer versions.

Overview

CageFS is one of the core features of CloudLinux. It is a virtualized, per-user file system that uniquely encapsulates each cPanel users, preventing users from seeing each other and viewing sensitive information. CageFS prevents a large number of attacks, including most privilege escalation and information disclosure attacks. It is design to add security to cPanel-based shared hosting environment.

With CageFS

• Users only have access to safe files.
• Users cannot see other users and have no way to detect the presence of other users or user names on the server.
• Users cannot see server configuration files, like Apache config files.
• Users have a limited view of their own processing file system, and cannot see other users’ processes.