How to Setup Comodo on LiteSpeed Web Server with cPanel

Comodo is a Mod_Security rule set created by the Comodo Team. It provides real time protection for web apps running on the LiteSpeed Web Server. Its functions include:

• Protecting sensitive customer data
• Meeting PCI compliance requirements
• Blocking unauthorized access
• Preventing SQL injection and Cross Site Scripting (XSS) attacks

1. Sign up for a Comodo user account here
   
2. Install CWAF script
   

    wget https://waf.comodo.com/cpanel/cwaf_client_install.sh
    sh cwaf_client_install.sh

3. Follow the step-by-step prompts. The installation will detect which web server is running (Apache, LiteSpeed or Nginx)
   

1. Login to the WHM control panel, search for comodo from the search bar. You will see the main Comodo WAF plugin dashboard
2. Click on the Configuration tab and update your CWAF credentials
3. Click on the Main tab and update rule versions

Once completed, you will notice that the current rules version shows the correct Latest version

1. To check CWAF for protection, send the request as shown below:

   http://$server_domain/?a=b AND 1=1

   The server will respond with a 403 status code
   

1. Create a delete.php file with following codes
   

   <?php
   print("Please specify the name of the file to delete");
   print("<p>");
   $file=$_GET['filename'];
   system("rm $file");
   ?>

2. Create a dummy file
   

   touch bob.txt

3. Open

    http://$server_domain/delete.php?filename=bob.txt;id 

If WAF works, you will get a 403 forbidden page

1. Run the uninstall script

   cd /var/cpanel/cwaf
   bash /var/cpanel/cwaf/scripts/uninstall_cwaf.sh

2. Answer y

Once completed, Comodo WAF will be gone.