{"id":17530,"date":"2024-11-21T12:39:10","date_gmt":"2024-11-21T12:39:10","guid":{"rendered":"https:\/\/truehost.com\/support\/?post_type=docs&#038;p=17530"},"modified":"2024-11-22T06:22:30","modified_gmt":"2024-11-22T06:22:30","password":"","slug":"implementing-firewall-and-security-measures-in-cyberpanel","status":"publish","type":"docs","link":"https:\/\/truehost.com\/support\/knowledge-base\/implementing-firewall-and-security-measures-in-cyberpanel\/","title":{"rendered":"Implementing Firewall and Security Measures in CyberPanel"},"content":{"rendered":"\n<p>CyberPanel, a popular hosting control panel powered by OpenLiteSpeed, provides robust features for managing websites and servers. However, securing your server is essential to protect data, ensure uptime, and prevent unauthorized access. This article outlines how to implement effective firewall and security measures in CyberPanel.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h4 class=\"wp-block-heading\"><strong>1. Enabling and Configuring the Built-in Firewall<\/strong><\/h4>\n\n\n\n<p>CyberPanel includes a built-in firewall tool that integrates with ConfigServer Security &amp; Firewall (CSF). Here&#8217;s how to enable and configure it:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Log in to CyberPanel<\/strong>: Access your CyberPanel dashboard using your admin credentials.<\/li>\n<\/ul>\n\n\n\n<ol class=\"wp-block-list\">\n<li><\/li>\n<\/ol>\n\n\n\n<figure class=\"wp-block-image size-full is-style-zoooom\"><img loading=\"lazy\" decoding=\"async\" width=\"431\" height=\"380\" src=\"https:\/\/truehost.com\/support\/wp-content\/uploads\/2024\/11\/image-483.png\" alt=\"\" class=\"wp-image-17531\" srcset=\"https:\/\/truehost.com\/support\/wp-content\/uploads\/2024\/11\/image-483.png 431w, https:\/\/truehost.com\/support\/wp-content\/uploads\/2024\/11\/image-483-300x265.png 300w\" sizes=\"auto, (max-width: 431px) 100vw, 431px\" \/><\/figure>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Navigate to Firewall<\/strong>, then Go to <strong>Security<\/strong> &gt; <strong>CSF Firewall<\/strong>.<\/li>\n<\/ul>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"991\" height=\"450\" src=\"https:\/\/truehost.com\/support\/wp-content\/uploads\/2024\/11\/image-488.png\" alt=\"\" class=\"wp-image-17536\" srcset=\"https:\/\/truehost.com\/support\/wp-content\/uploads\/2024\/11\/image-488.png 991w, https:\/\/truehost.com\/support\/wp-content\/uploads\/2024\/11\/image-488-300x136.png 300w, https:\/\/truehost.com\/support\/wp-content\/uploads\/2024\/11\/image-488-768x349.png 768w\" sizes=\"auto, (max-width: 991px) 100vw, 991px\" \/><\/figure>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>install CSF<\/strong>, if not installed,  by clicking on the install button that is provided<\/li>\n<\/ul>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"263\" src=\"https:\/\/truehost.com\/support\/wp-content\/uploads\/2024\/11\/image-489-1024x263.png\" alt=\"\" class=\"wp-image-17537\" srcset=\"https:\/\/truehost.com\/support\/wp-content\/uploads\/2024\/11\/image-489-1024x263.png 1024w, https:\/\/truehost.com\/support\/wp-content\/uploads\/2024\/11\/image-489-300x77.png 300w, https:\/\/truehost.com\/support\/wp-content\/uploads\/2024\/11\/image-489-768x197.png 768w, https:\/\/truehost.com\/support\/wp-content\/uploads\/2024\/11\/image-489.png 1029w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Enable CSF<\/strong>: If not already enabled, toggle the firewall settings to activate it.<\/li>\n<\/ul>\n\n\n\n<figure class=\"wp-block-image size-full is-style-zoooom\"><img loading=\"lazy\" decoding=\"async\" width=\"1023\" height=\"589\" src=\"https:\/\/truehost.com\/support\/wp-content\/uploads\/2024\/11\/image-490.png\" alt=\"\" class=\"wp-image-17538\" srcset=\"https:\/\/truehost.com\/support\/wp-content\/uploads\/2024\/11\/image-490.png 1023w, https:\/\/truehost.com\/support\/wp-content\/uploads\/2024\/11\/image-490-300x173.png 300w, https:\/\/truehost.com\/support\/wp-content\/uploads\/2024\/11\/image-490-768x442.png 768w\" sizes=\"auto, (max-width: 1023px) 100vw, 1023px\" \/><\/figure>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Add Firewall Rules<\/strong>:\n<ul class=\"wp-block-list\">\n<li>You can define inbound and outbound rules.<\/li>\n\n\n\n<li>For instance, allow specific ports like 80 (HTTP), 443 (HTTPS), or SSH (default 22) and block unnecessary ports to reduce attack surfaces. <\/li>\n\n\n\n<li>To do that, you can just add the ports in the field provided, and separate them with comas, then click the save button.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"635\" src=\"https:\/\/truehost.com\/support\/wp-content\/uploads\/2024\/11\/image-491-1024x635.png\" alt=\"\" class=\"wp-image-17539\" srcset=\"https:\/\/truehost.com\/support\/wp-content\/uploads\/2024\/11\/image-491-1024x635.png 1024w, https:\/\/truehost.com\/support\/wp-content\/uploads\/2024\/11\/image-491-300x186.png 300w, https:\/\/truehost.com\/support\/wp-content\/uploads\/2024\/11\/image-491-768x476.png 768w, https:\/\/truehost.com\/support\/wp-content\/uploads\/2024\/11\/image-491.png 1034w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<ul class=\"wp-block-list\">\n<li>You can also use the <strong>CSF  Native GU<\/strong>I then go to <strong>Firewall Configuration<\/strong><\/li>\n<\/ul>\n\n\n\n<figure class=\"wp-block-image size-full is-style-zoooom\"><img loading=\"lazy\" decoding=\"async\" width=\"770\" height=\"309\" src=\"https:\/\/truehost.com\/support\/wp-content\/uploads\/2024\/11\/image-492.png\" alt=\"\" class=\"wp-image-17540\" srcset=\"https:\/\/truehost.com\/support\/wp-content\/uploads\/2024\/11\/image-492.png 770w, https:\/\/truehost.com\/support\/wp-content\/uploads\/2024\/11\/image-492-300x120.png 300w, https:\/\/truehost.com\/support\/wp-content\/uploads\/2024\/11\/image-492-768x308.png 768w\" sizes=\"auto, (max-width: 770px) 100vw, 770px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large is-style-zoooom\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"180\" src=\"https:\/\/truehost.com\/support\/wp-content\/uploads\/2024\/11\/image-493-1024x180.png\" alt=\"\" class=\"wp-image-17541\" srcset=\"https:\/\/truehost.com\/support\/wp-content\/uploads\/2024\/11\/image-493-1024x180.png 1024w, https:\/\/truehost.com\/support\/wp-content\/uploads\/2024\/11\/image-493-300x53.png 300w, https:\/\/truehost.com\/support\/wp-content\/uploads\/2024\/11\/image-493-768x135.png 768w, https:\/\/truehost.com\/support\/wp-content\/uploads\/2024\/11\/image-493.png 1080w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Once done, click on the <strong>Add<\/strong> button to add the rule.<\/li>\n<\/ul>\n\n\n\n<figure class=\"wp-block-image size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"996\" height=\"158\" src=\"https:\/\/truehost.com\/support\/wp-content\/uploads\/2024\/11\/image-487.png\" alt=\"\" class=\"wp-image-17535\" style=\"width:840px;height:auto\" srcset=\"https:\/\/truehost.com\/support\/wp-content\/uploads\/2024\/11\/image-487.png 996w, https:\/\/truehost.com\/support\/wp-content\/uploads\/2024\/11\/image-487-300x48.png 300w, https:\/\/truehost.com\/support\/wp-content\/uploads\/2024\/11\/image-487-768x122.png 768w\" sizes=\"auto, (max-width: 996px) 100vw, 996px\" \/><\/figure>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Scroll down to IPv4 Port Settings section and add the ports that you want to enable, under <strong>TCP_IN,<\/strong> <strong>TCP_OUT<\/strong>, <strong>UDP_IN<\/strong>, <strong>UDP_OUT<\/strong><\/li>\n<\/ul>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"962\" height=\"861\" src=\"https:\/\/truehost.com\/support\/wp-content\/uploads\/2024\/11\/image-494.png\" alt=\"\" class=\"wp-image-17542\" srcset=\"https:\/\/truehost.com\/support\/wp-content\/uploads\/2024\/11\/image-494.png 962w, https:\/\/truehost.com\/support\/wp-content\/uploads\/2024\/11\/image-494-300x269.png 300w, https:\/\/truehost.com\/support\/wp-content\/uploads\/2024\/11\/image-494-768x687.png 768w\" sizes=\"auto, (max-width: 962px) 100vw, 962px\" \/><\/figure>\n\n\n\n<ol class=\"wp-block-list\">\n<li><\/li>\n<\/ol>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Once done, scroll to the very bottom of the page and click on <strong>Change<\/strong>, to save changes.<\/li>\n<\/ul>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"975\" height=\"248\" src=\"https:\/\/truehost.com\/support\/wp-content\/uploads\/2024\/11\/image-495.png\" alt=\"\" class=\"wp-image-17543\" srcset=\"https:\/\/truehost.com\/support\/wp-content\/uploads\/2024\/11\/image-495.png 975w, https:\/\/truehost.com\/support\/wp-content\/uploads\/2024\/11\/image-495-300x76.png 300w, https:\/\/truehost.com\/support\/wp-content\/uploads\/2024\/11\/image-495-768x195.png 768w\" sizes=\"auto, (max-width: 975px) 100vw, 975px\" \/><\/figure>\n\n\n\n<h4 class=\"wp-block-heading\"><strong>2. Using IP Address Banning<\/strong><\/h4>\n\n\n\n<p>Blocking suspicious IP addresses is crucial to thwart repeated login attempts and DDoS attacks:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Navigate to Security &gt; CSF <\/strong><\/li>\n<\/ul>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"991\" height=\"450\" src=\"https:\/\/truehost.com\/support\/wp-content\/uploads\/2024\/11\/image-496.png\" alt=\"\" class=\"wp-image-17546\" srcset=\"https:\/\/truehost.com\/support\/wp-content\/uploads\/2024\/11\/image-496.png 991w, https:\/\/truehost.com\/support\/wp-content\/uploads\/2024\/11\/image-496-300x136.png 300w, https:\/\/truehost.com\/support\/wp-content\/uploads\/2024\/11\/image-496-768x349.png 768w\" sizes=\"auto, (max-width: 991px) 100vw, 991px\" \/><\/figure>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Click on <strong>CSF<\/strong> tab to see two options; one for <strong>Allow IP<\/strong> and the other for <strong>Block IP<\/strong> Address <\/li>\n<\/ul>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"342\" src=\"https:\/\/truehost.com\/support\/wp-content\/uploads\/2024\/11\/image-497-1024x342.png\" alt=\"\" class=\"wp-image-17547\" srcset=\"https:\/\/truehost.com\/support\/wp-content\/uploads\/2024\/11\/image-497-1024x342.png 1024w, https:\/\/truehost.com\/support\/wp-content\/uploads\/2024\/11\/image-497-300x100.png 300w, https:\/\/truehost.com\/support\/wp-content\/uploads\/2024\/11\/image-497-768x256.png 768w, https:\/\/truehost.com\/support\/wp-content\/uploads\/2024\/11\/image-497.png 1033w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Enter the IP addresses you want to block in the Block IP Address field and click the <strong>Save<\/strong> icon<\/li>\n<\/ul>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"268\" src=\"https:\/\/truehost.com\/support\/wp-content\/uploads\/2024\/11\/image-498-1024x268.png\" alt=\"\" class=\"wp-image-17548\" srcset=\"https:\/\/truehost.com\/support\/wp-content\/uploads\/2024\/11\/image-498-1024x268.png 1024w, https:\/\/truehost.com\/support\/wp-content\/uploads\/2024\/11\/image-498-300x79.png 300w, https:\/\/truehost.com\/support\/wp-content\/uploads\/2024\/11\/image-498-768x201.png 768w, https:\/\/truehost.com\/support\/wp-content\/uploads\/2024\/11\/image-498.png 1034w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<ol class=\"wp-block-list\">\n<li><\/li>\n<\/ol>\n\n\n\n<ul class=\"wp-block-list\">\n<li>You can also do that from the Configurations section, by adding the IP in the Quick Deny Section, then give it a comment to show why you denied it<\/li>\n<\/ul>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"686\" height=\"276\" src=\"https:\/\/truehost.com\/support\/wp-content\/uploads\/2024\/11\/image-499.png\" alt=\"\" class=\"wp-image-17549\" srcset=\"https:\/\/truehost.com\/support\/wp-content\/uploads\/2024\/11\/image-499.png 686w, https:\/\/truehost.com\/support\/wp-content\/uploads\/2024\/11\/image-499-300x121.png 300w\" sizes=\"auto, (max-width: 686px) 100vw, 686px\" \/><\/figure>\n\n\n\n<ul class=\"wp-block-list\">\n<li>You will then click on Quick Deny to block the IP.<\/li>\n<\/ul>\n\n\n\n<p>Additionally, configure <strong>IP Limiting<\/strong> under CSF settings to automatically block IPs after a certain number of failed login attempts.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h4 class=\"wp-block-heading\"><strong>3. Implementing ModSecurity for Web Application Protection<\/strong><\/h4>\n\n\n\n<p>ModSecurity is a web application firewall (WAF) that helps protect against common vulnerabilities:<\/p>\n\n\n\n<p><strong>Enable ModSecurity<\/strong>:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Go to <strong>Security<\/strong> &gt; <strong>ModSecurity<\/strong> in CyberPanel.<\/li>\n<\/ul>\n\n\n\n<figure class=\"wp-block-image size-full is-style-zoooom\"><img loading=\"lazy\" decoding=\"async\" width=\"913\" height=\"448\" src=\"https:\/\/truehost.com\/support\/wp-content\/uploads\/2024\/11\/image-500.png\" alt=\"\" class=\"wp-image-17550\" srcset=\"https:\/\/truehost.com\/support\/wp-content\/uploads\/2024\/11\/image-500.png 913w, https:\/\/truehost.com\/support\/wp-content\/uploads\/2024\/11\/image-500-300x147.png 300w, https:\/\/truehost.com\/support\/wp-content\/uploads\/2024\/11\/image-500-768x377.png 768w\" sizes=\"auto, (max-width: 913px) 100vw, 913px\" \/><\/figure>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Install Mod Security using the installation button provided.<\/li>\n<\/ul>\n\n\n\n<figure class=\"wp-block-image size-large is-style-zoooom\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"246\" src=\"https:\/\/truehost.com\/support\/wp-content\/uploads\/2024\/11\/image-501-1024x246.png\" alt=\"\" class=\"wp-image-17551\" srcset=\"https:\/\/truehost.com\/support\/wp-content\/uploads\/2024\/11\/image-501-1024x246.png 1024w, https:\/\/truehost.com\/support\/wp-content\/uploads\/2024\/11\/image-501-300x72.png 300w, https:\/\/truehost.com\/support\/wp-content\/uploads\/2024\/11\/image-501-768x185.png 768w, https:\/\/truehost.com\/support\/wp-content\/uploads\/2024\/11\/image-501.png 1056w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Once done, you can switch it on for your domains.<\/li>\n<\/ul>\n\n\n\n<p><strong>Install Rulesets<\/strong>:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Use default rules or download rulesets like the OWASP ModSecurity Core Rule Set (CRS) for comprehensive protection against SQL injection, XSS, and other web attacks.<\/li>\n<\/ul>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h4 class=\"wp-block-heading\"><strong>4. Managing SSH Security<\/strong><\/h4>\n\n\n\n<p>Unsecured SSH access can be an entry point for attackers. Enhance its security with these measures:<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li><strong>Change the Default SSH Port<\/strong>:\n<ul class=\"wp-block-list\">\n<li>Avoid using port 22 to minimize brute-force attacks. See <a href=\"https:\/\/truehost.com\/support\/knowledge-base\/how-to-change-ssh-port-to-a-custom-port\/\" target=\"_blank\" rel=\"noreferrer noopener\"><strong>this article<\/strong><\/a> on how to.<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li><strong>Disable Root Login<\/strong>:\n<ul class=\"wp-block-list\">\n<li>Prevent direct root access via SSH by following <a href=\"https:\/\/truehost.com\/support\/knowledge-base\/how-to-disable-root-ssh-completely\/\" target=\"_blank\" rel=\"noreferrer noopener\"><strong>these<\/strong><\/a> instructions.<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li><strong>Use SSH Keys<\/strong>:\n<ul class=\"wp-block-list\">\n<li>Enable key-based authentication for added security. Here is <a href=\"https:\/\/truehost.com\/support\/knowledge-base\/how-to-configure-ssh-key-for-a-user\/\" target=\"_blank\" rel=\"noreferrer noopener\"><strong>how to<\/strong><\/a><\/li>\n<\/ul>\n<\/li>\n<\/ol>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h4 class=\"wp-block-heading\"><strong>5. Enforcing Strong Password Policies<\/strong><\/h4>\n\n\n\n<p>Weak passwords are a major vulnerability. CyberPanel lets you enforce strong password policies for all users:<\/p>\n\n\n\n<p><strong>Go to Users Management<\/strong>:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Navigate to <strong>Users<\/strong> > <strong>Edit User<\/strong>.<\/li>\n<\/ul>\n\n\n\n<ol class=\"wp-block-list\"><\/ol>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"351\" src=\"https:\/\/truehost.com\/support\/wp-content\/uploads\/2024\/11\/image-502-1024x351.png\" alt=\"\" class=\"wp-image-17557\" srcset=\"https:\/\/truehost.com\/support\/wp-content\/uploads\/2024\/11\/image-502-1024x351.png 1024w, https:\/\/truehost.com\/support\/wp-content\/uploads\/2024\/11\/image-502-300x103.png 300w, https:\/\/truehost.com\/support\/wp-content\/uploads\/2024\/11\/image-502-768x263.png 768w, https:\/\/truehost.com\/support\/wp-content\/uploads\/2024\/11\/image-502.png 1262w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p><strong>Update Passwords<\/strong>:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Encourage the use of passwords with a mix of uppercase, lowercase, numbers, and symbols.<\/li>\n<\/ul>\n\n\n\n<ol class=\"wp-block-list\"><\/ol>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h4 class=\"wp-block-heading\"><strong>6. Enabling Two-Factor Authentication (2FA)<\/strong><\/h4>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Two-factor authentication adds an additional layer of security. You can set it up suing <a href=\"https:\/\/truehost.com\/support\/knowledge-base\/how-to-enable-two-factor-authentication-in-cyberpanel\/\" target=\"_blank\" rel=\"noreferrer noopener\">these steps<\/a><\/li>\n<\/ul>\n\n\n\n<ol class=\"wp-block-list\"><\/ol>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h4 class=\"wp-block-heading\"><strong>7. Regular Security Updates<\/strong><\/h4>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Outdated software is a common vulnerability. Ensure that CyberPanel, OpenLiteSpeed, and all installed applications are up to date:<\/li>\n<\/ul>\n\n\n\n<p><strong>Check for Updates<\/strong>:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Log in to CyberPanel and navigate to <strong>Version Management<\/strong>.<\/li>\n<\/ul>\n\n\n\n<ol class=\"wp-block-list\"><\/ol>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"1010\" height=\"385\" src=\"https:\/\/truehost.com\/support\/wp-content\/uploads\/2024\/11\/image-519.png\" alt=\"\" class=\"wp-image-17594\" srcset=\"https:\/\/truehost.com\/support\/wp-content\/uploads\/2024\/11\/image-519.png 1010w, https:\/\/truehost.com\/support\/wp-content\/uploads\/2024\/11\/image-519-300x114.png 300w, https:\/\/truehost.com\/support\/wp-content\/uploads\/2024\/11\/image-519-768x293.png 768w\" sizes=\"auto, (max-width: 1010px) 100vw, 1010px\" \/><\/figure>\n\n\n\n<ul class=\"wp-block-list\">\n<li>If you see a message that says <strong>Note: Latest commit does not match, please upgrade<\/strong> then you will need to <a href=\"https:\/\/truehost.com\/support\/knowledge-base\/how-to-access-a-server-via-ssh-terminal\/\" target=\"_blank\" rel=\"noreferrer noopener\">SSH to your Cyberpanel server<\/a> and upgrade it by running the command below;<\/li>\n<\/ul>\n\n\n\n<pre class=\"wp-block-code\"><code>cyberpanel_utility<\/code><\/pre>\n\n\n\n<ul class=\"wp-block-list\">\n<li>You will then type 1, followed by <strong>Enter<\/strong> to upgrade the Cyberpanel<\/li>\n\n\n\n<li>You can then update other packages following <a href=\"https:\/\/truehost.com\/support\/knowledge-base\/how-to-update-a-cyberpanel-server\/\" target=\"_blank\" rel=\"noreferrer noopener\">these steps<\/a><\/li>\n<\/ul>\n\n\n\n<ol class=\"wp-block-list\"><\/ol>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h4 class=\"wp-block-heading\"><strong>8. Configuring Backups<\/strong><\/h4>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Always have a backup strategy in place. <\/li>\n\n\n\n<li>You can <strong><a href=\"https:\/\/truehost.com\/support\/knowledge-base\/how-to-add-destination-for-scheduled-local-sftp-remote-backups-on-cyberpanel\/\" target=\"_blank\" rel=\"noreferrer noopener\">Set Up Automated Backups<\/a><\/strong> on your Cyberpanel server to ensure that you have something to recover from, if anything goes wrong.<\/li>\n<\/ul>\n\n\n\n<ol class=\"wp-block-list\"><\/ol>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h4 class=\"wp-block-heading\"><strong>9. Monitoring and Logs<\/strong><\/h4>\n\n\n\n<p>Stay vigilant by monitoring your server activities:<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li><strong>View Logs<\/strong>:\n<ul class=\"wp-block-list\">\n<li>CyberPanel provides logs for SSH, web traffic, and email. Regularly review them for unusual activity.<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li><strong>Install Monitoring Tools<\/strong>:\n<ul class=\"wp-block-list\">\n<li>Use tools like <a href=\"https:\/\/truehost.com\/support\/knowledge-base\/how-to-secure-a-linux-server-with-fail2ban\/\" target=\"_blank\" rel=\"noreferrer noopener\"><strong>Fail2Ban<\/strong><\/a> to monitor failed login attempts and ban malicious IPs automatically.<\/li>\n<\/ul>\n<\/li>\n<\/ol>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h4 class=\"wp-block-heading\"><strong>10. Educating Users<\/strong><\/h4>\n\n\n\n<p>Finally, educate users and administrators about best practices, such as:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Avoiding phishing attempts.<\/li>\n\n\n\n<li>Recognizing signs of malware or hacking attempts.<\/li>\n\n\n\n<li>Using secure communication protocols like HTTPS and SFTP.<\/li>\n<\/ul>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h3 class=\"wp-block-heading\">Author&#8217;s Final Word<\/h3>\n\n\n\n<p>Implementing a firewall and security measures in CyberPanel is crucial for maintaining server integrity and protecting against cyber threats. The above the steps can help you create a secure hosting environment that ensures data safety and minimizes risks. <\/p>\n","protected":false},"excerpt":{"rendered":"<p>CyberPanel, a popular hosting control panel powered by OpenLiteSpeed, provides robust features for managing websites and servers. However, securing your server is essential to protect data, ensure uptime, and prevent unauthorized access. This article outlines how to implement effective firewall and security measures in CyberPanel. 1. Enabling and Configuring the Built-in Firewall CyberPanel includes a [&hellip;]<\/p>\n","protected":false},"author":9,"featured_media":0,"comment_status":"open","ping_status":"closed","template":"","meta":{"_eb_attr":"","_exactmetrics_skip_tracking":false,"_exactmetrics_sitenote_active":false,"_exactmetrics_sitenote_note":"","_exactmetrics_sitenote_category":0,"footnotes":""},"doc_category":[1820,1824,1879,2128],"doc_tag":[],"class_list":["post-17530","docs","type-docs","status-publish","hentry","doc_category-cloud-servers-in-kenya","doc_category-dedicated-servers","doc_category-servers","doc_category-vps-servers"],"year_month":"2026-06","word_count":796,"total_views":0,"reactions":{"happy":0,"normal":0,"sad":0},"author_info":{"name":"Eugene","author_nicename":"eugene","author_url":"https:\/\/truehost.com\/support\/author\/eugene\/"},"doc_category_info":[{"term_name":"Cloud servers in Kenya","term_url":"https:\/\/truehost.com\/support\/docs-category\/cloud-servers-in-kenya\/"},{"term_name":"dedicated servers","term_url":"https:\/\/truehost.com\/support\/docs-category\/dedicated-servers\/"},{"term_name":"Servers","term_url":"https:\/\/truehost.com\/support\/docs-category\/servers\/"},{"term_name":"VPS-Servers","term_url":"https:\/\/truehost.com\/support\/docs-category\/vps-servers\/"}],"doc_tag_info":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.8 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Implementing Firewall and Security Measures in CyberPanel -<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/truehost.com\/support\/knowledge-base\/implementing-firewall-and-security-measures-in-cyberpanel\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Implementing Firewall and Security Measures in CyberPanel -\" \/>\n<meta property=\"og:description\" content=\"CyberPanel, a popular hosting control panel powered by OpenLiteSpeed, provides robust features for managing websites and servers. However, securing your server is essential to protect data, ensure uptime, and prevent unauthorized access. This article outlines how to implement effective firewall and security measures in CyberPanel. 1. Enabling and Configuring the Built-in Firewall CyberPanel includes a [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/truehost.com\/support\/knowledge-base\/implementing-firewall-and-security-measures-in-cyberpanel\/\" \/>\n<meta property=\"article:modified_time\" content=\"2024-11-22T06:22:30+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/truehost.com\/support\/wp-content\/uploads\/2024\/11\/image-483.png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"7 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/truehost.com\\\/support\\\/knowledge-base\\\/implementing-firewall-and-security-measures-in-cyberpanel\\\/\",\"url\":\"https:\\\/\\\/truehost.com\\\/support\\\/knowledge-base\\\/implementing-firewall-and-security-measures-in-cyberpanel\\\/\",\"name\":\"Implementing Firewall and Security Measures in CyberPanel -\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/truehost.com\\\/support\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/truehost.com\\\/support\\\/knowledge-base\\\/implementing-firewall-and-security-measures-in-cyberpanel\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/truehost.com\\\/support\\\/knowledge-base\\\/implementing-firewall-and-security-measures-in-cyberpanel\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/truehost.com\\\/support\\\/wp-content\\\/uploads\\\/2024\\\/11\\\/image-483.png\",\"datePublished\":\"2024-11-21T12:39:10+00:00\",\"dateModified\":\"2024-11-22T06:22:30+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/truehost.com\\\/support\\\/knowledge-base\\\/implementing-firewall-and-security-measures-in-cyberpanel\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/truehost.com\\\/support\\\/knowledge-base\\\/implementing-firewall-and-security-measures-in-cyberpanel\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/truehost.com\\\/support\\\/knowledge-base\\\/implementing-firewall-and-security-measures-in-cyberpanel\\\/#primaryimage\",\"url\":\"https:\\\/\\\/truehost.com\\\/support\\\/wp-content\\\/uploads\\\/2024\\\/11\\\/image-483.png\",\"contentUrl\":\"https:\\\/\\\/truehost.com\\\/support\\\/wp-content\\\/uploads\\\/2024\\\/11\\\/image-483.png\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/truehost.com\\\/support\\\/knowledge-base\\\/implementing-firewall-and-security-measures-in-cyberpanel\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/truehost.com\\\/support\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Implementing Firewall and Security Measures in CyberPanel\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/truehost.com\\\/support\\\/#website\",\"url\":\"https:\\\/\\\/truehost.com\\\/support\\\/\",\"name\":\"\",\"description\":\"Help In a Click\",\"publisher\":{\"@id\":\"https:\\\/\\\/truehost.com\\\/support\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/truehost.com\\\/support\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/truehost.com\\\/support\\\/#organization\",\"name\":\"Truehost Kenya\",\"url\":\"https:\\\/\\\/truehost.com\\\/support\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/truehost.com\\\/support\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/truehost.com\\\/support\\\/wp-content\\\/uploads\\\/2026\\\/04\\\/cropped-image_2026-04-16_174808866.png\",\"contentUrl\":\"https:\\\/\\\/truehost.com\\\/support\\\/wp-content\\\/uploads\\\/2026\\\/04\\\/cropped-image_2026-04-16_174808866.png\",\"width\":240,\"height\":48,\"caption\":\"Truehost Kenya\"},\"image\":{\"@id\":\"https:\\\/\\\/truehost.com\\\/support\\\/#\\\/schema\\\/logo\\\/image\\\/\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Implementing Firewall and Security Measures in CyberPanel -","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/truehost.com\/support\/knowledge-base\/implementing-firewall-and-security-measures-in-cyberpanel\/","og_locale":"en_US","og_type":"article","og_title":"Implementing Firewall and Security Measures in CyberPanel -","og_description":"CyberPanel, a popular hosting control panel powered by OpenLiteSpeed, provides robust features for managing websites and servers. However, securing your server is essential to protect data, ensure uptime, and prevent unauthorized access. This article outlines how to implement effective firewall and security measures in CyberPanel. 1. Enabling and Configuring the Built-in Firewall CyberPanel includes a [&hellip;]","og_url":"https:\/\/truehost.com\/support\/knowledge-base\/implementing-firewall-and-security-measures-in-cyberpanel\/","article_modified_time":"2024-11-22T06:22:30+00:00","og_image":[{"url":"https:\/\/truehost.com\/support\/wp-content\/uploads\/2024\/11\/image-483.png","type":"","width":"","height":""}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"7 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/truehost.com\/support\/knowledge-base\/implementing-firewall-and-security-measures-in-cyberpanel\/","url":"https:\/\/truehost.com\/support\/knowledge-base\/implementing-firewall-and-security-measures-in-cyberpanel\/","name":"Implementing Firewall and Security Measures in CyberPanel -","isPartOf":{"@id":"https:\/\/truehost.com\/support\/#website"},"primaryImageOfPage":{"@id":"https:\/\/truehost.com\/support\/knowledge-base\/implementing-firewall-and-security-measures-in-cyberpanel\/#primaryimage"},"image":{"@id":"https:\/\/truehost.com\/support\/knowledge-base\/implementing-firewall-and-security-measures-in-cyberpanel\/#primaryimage"},"thumbnailUrl":"https:\/\/truehost.com\/support\/wp-content\/uploads\/2024\/11\/image-483.png","datePublished":"2024-11-21T12:39:10+00:00","dateModified":"2024-11-22T06:22:30+00:00","breadcrumb":{"@id":"https:\/\/truehost.com\/support\/knowledge-base\/implementing-firewall-and-security-measures-in-cyberpanel\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/truehost.com\/support\/knowledge-base\/implementing-firewall-and-security-measures-in-cyberpanel\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/truehost.com\/support\/knowledge-base\/implementing-firewall-and-security-measures-in-cyberpanel\/#primaryimage","url":"https:\/\/truehost.com\/support\/wp-content\/uploads\/2024\/11\/image-483.png","contentUrl":"https:\/\/truehost.com\/support\/wp-content\/uploads\/2024\/11\/image-483.png"},{"@type":"BreadcrumbList","@id":"https:\/\/truehost.com\/support\/knowledge-base\/implementing-firewall-and-security-measures-in-cyberpanel\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/truehost.com\/support\/"},{"@type":"ListItem","position":2,"name":"Implementing Firewall and Security Measures in CyberPanel"}]},{"@type":"WebSite","@id":"https:\/\/truehost.com\/support\/#website","url":"https:\/\/truehost.com\/support\/","name":"","description":"Help In a Click","publisher":{"@id":"https:\/\/truehost.com\/support\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/truehost.com\/support\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/truehost.com\/support\/#organization","name":"Truehost Kenya","url":"https:\/\/truehost.com\/support\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/truehost.com\/support\/#\/schema\/logo\/image\/","url":"https:\/\/truehost.com\/support\/wp-content\/uploads\/2026\/04\/cropped-image_2026-04-16_174808866.png","contentUrl":"https:\/\/truehost.com\/support\/wp-content\/uploads\/2026\/04\/cropped-image_2026-04-16_174808866.png","width":240,"height":48,"caption":"Truehost Kenya"},"image":{"@id":"https:\/\/truehost.com\/support\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/truehost.com\/support\/wp-json\/wp\/v2\/docs\/17530","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/truehost.com\/support\/wp-json\/wp\/v2\/docs"}],"about":[{"href":"https:\/\/truehost.com\/support\/wp-json\/wp\/v2\/types\/docs"}],"author":[{"embeddable":true,"href":"https:\/\/truehost.com\/support\/wp-json\/wp\/v2\/users\/9"}],"replies":[{"embeddable":true,"href":"https:\/\/truehost.com\/support\/wp-json\/wp\/v2\/comments?post=17530"}],"version-history":[{"count":10,"href":"https:\/\/truehost.com\/support\/wp-json\/wp\/v2\/docs\/17530\/revisions"}],"predecessor-version":[{"id":17599,"href":"https:\/\/truehost.com\/support\/wp-json\/wp\/v2\/docs\/17530\/revisions\/17599"}],"wp:attachment":[{"href":"https:\/\/truehost.com\/support\/wp-json\/wp\/v2\/media?parent=17530"}],"wp:term":[{"taxonomy":"doc_category","embeddable":true,"href":"https:\/\/truehost.com\/support\/wp-json\/wp\/v2\/doc_category?post=17530"},{"taxonomy":"doc_tag","embeddable":true,"href":"https:\/\/truehost.com\/support\/wp-json\/wp\/v2\/doc_tag?post=17530"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}