We posted 2 new Knowledge Base articles with steps on using the OWASP CRS ruleset with Control Web Panel (CWP) on 2025-02-01.

These give step by step commands on how to get the latest OWASP working on both CWPfree (Free Community version) and CWPpro (Paid version).

The first part is updating the ModSecurity version running on CWP.
The default version that gets installed with CWP is 2.9.1, which unfortunately doesn’t work with OWASP ruleset’s above 3.x.

You can find the KB articles at:

Update ModSecurity running CWP and Apache on AlmaLinux 8 / 9 – Starburst Services Knowledge Base

Update to OWASP CRS Ruleset running CWP and Apache on AlmaLinux 8 / 9 – Starburst Services Knowledge Base

Posted by in Blog on February 5, 2025 |