Mod Security

Mod Security detects and prevents attacks against web applications. In Logpoint, Mod Security consists of ModSecurityCompiledNormalizer that normalizes Mod Security events and enables you to analyze Mod Security data.

Release Details

Version: 5.2.0

Release date: May 08, 2024

Supported On: Logpoint v7.4.0 or later for log source template

Documentation: Mod Security guide

SHA 256: 09001700b8bf349858050de97e2e95cb5e885fe291c0ac6985666047267ba06a

Download

Enhancement

Description	Issue ID	Reference ID
Added Syslog Collector based ModSecurity log source template, simplifying the log source configuration process. To learn more, go to Creating Log Source via a Template.	KB-22923	-

Past Releases

Mod Security v5.1.0

Release Date: August 14, 2023

Supported On: Logpoint v6.6.0 or later

Download: Mod_Security_5.1.0.pak

SHA256: 7c75e8ef8617b58007cbbd84a920bba52f78a1f1e521f0574be85b1acb6cd37c

Enhancements

Description	Issue ID	Reference ID
Added a new compiled normalizer ModSecurityCompiledNormalizer to support ModSecurity logs.	KB-14126	59397
Added and updated the signatures in LP_Mod Security.	KB-14126	59397

Bug Fix

Description	Issue ID	Reference ID
The file field was not properly normalized by LP_Mod Security.	KB-20215	-

Mod Security v5.0.0

Release Date: January 20, 2021

Supported On: Logpoint v6.6.0 and later

Download:Mod_Security_5.0.0.pak

SHA256: 5e21f2bb0dd02078e76307b14725fb65139c81cfc4a11d04e87ba1214a728d0b

Support

If you have any questions or require assistance, create a support ticket.