DUTCHWEBHOSTING.NL Administrator's Guide
  • About Plesk
    • Logging in to Plesk for the first time
    • The Plesk GUI
    • Plesk in Restricted Mode
  • Web Servers
    • Apache and nginx Web Servers (Linux)
      • Apache with nginx
      • Adjusting Apache Settings for Virtual Hosts
      • Adjusting nginx Settings for Virtual Hosts
      • Enabling nginx caching
      • Optimizing Apache Web Server
      • HTTP/2 Support in Plesk
      • Apache and Nginx Configuration Files
    • IIS Web Server (Windows)
      • Adjusting IIS Settings for Websites
      • IIS Application Pool
      • Tracing Failed Requests
      • IIS Dynamic Compression Support
  • Web Hosting
    • Website Directory Structure
      • Defining a Custom Document Root
      • Defining a Custom Virtual Host Template
      • Virtual Host Structure (Linux)
      • Virtual Host Structure (Windows)
    • Website Preview
    • PHP Management
      • Installing PHP
      • Configuring PHP Handlers
      • PHP Extensions and Settings
      • PHP Handler Types
      • Adding Custom PHP Versions (Linux)
      • Running PHP Scripts from the Command Line
      • Customizing PHP Parameters
    • Configuring ASP.NET (Windows)
  • Mail
    • Configuring Server-Wide Mail Settings
    • Using Plesk Without the Mail Server
    • Removing Mail Functionality from the Customer Panel
    • Using Other Mail Server Software
    • Antispam Tools
      • SpamAssassin Spam Filter
      • DKIM, SPF, and DMARC Protection
      • DNS Blackhole Lists
      • Server-wide Black and White Lists
      • Greylisting (Linux)
    • Protection from Outbound Spam
      • Custom Limits
      • How Limits Work
      • Notifications About Attempts to Exceed Limits
      • Statistics and Reports
    • Protection from Mail Interception
    • Antivirus Software
    • Webmail Software
    • Mailing Lists
    • Mail Queue (Linux)
    • Mass Email Notifications
    • Automatic Email Notifications
    • (Plesk for Linux) Mailbox Quota Notifications
    • Remote SmarterMail Support (Windows)
  • DNS
    • DNS Template
    • DNS Zones for Subdomains
    • Configuring the Recursive DNS
    • Restricting DNS Zones Transfer
    • Restricting Users’ Access to Other Users’ DNS Zones
    • Using BIND Instead of Microsoft DNS (Windows)
    • Switching Off the DNS Service
    • Using External DNS Servers
    • Slave DNS Server
    • Providing Redundant DNS Servers
    • Plesk Without a DNS Server
    • Using DNSSEC (Linux)
  • Database Servers
    • Adding and Removing Database Servers
    • Configuring Backup Settings for Remote SQL Servers
    • Changing Database Administrator’s Credentials
    • Database User Roles and Permissions
    • Database Hosting Preferences
    • Database Management Tools
    • Connecting to External Databases (Windows)
    • Moving Databases to Another Subscription
    • Remote Access to Databases
    • Disabling Microsoft SQL Server Database Dumps Upload
    • (Plesk for Windows) Changing Clients’ MySQL Server Data Location
  • Server Administration
    • IP Addresses Management
    • Scheduling Tasks
      • Scheduled Tasks Shell Setting
    • Server Settings
    • System Services
    • System Date and Time
    • Protection Against Brute Force Attacks (Fail2Ban)
      • Fail2Ban Jails Management
    • Web Application Firewall (ModSecurity)
      • Atomic ModSecurity Rule Sets
    • Web Applications
      • How Apps Become Available to Your Customers
      • Application Vault
    • Session Preferences
    • (Plesk for Linux) Configuring Passive FTP Mode
    • Remote Access (Windows)
    • Additional Administrator Accounts
    • Dist-Upgrade Support
    • Event Handlers
    • Event Parameters Passed by Event Handlers
    • (Plesk for Linux) System Updates
    • Watchdog (System Monitoring) Component
      • Configuring Watchdog Settings
      • Monitoring System Services
      • Monitoring Disk Usage
      • Scanning Server for Malware
      • Viewing CPU and RAM Usage Statistics
      • Troubleshooting
    • Automatic Restart of Crashed Services with Systemd
  • Plesk Administration
    • Plesk Licensing
      • Plesk Obsidian Licensing
      • Installing a Plesk License Key
      • Installing Additional License Keys for Plesk Add-ons
      • Upgrading Your License Key
      • Rolling Back to Your Previously Used License Key
    • Securing Plesk
      • Restricting Administrative Access
      • Restricting Remote Access via Plesk API
      • Setting Up the Password Strength Policy
      • Using Secure FTP
      • (Plesk for Windows) Custom Handlers Policy
      • SSL/TLS and Shared IP Addresses
      • Securing Plesk and the Mail Server With SSL/TLS Certificates
      • (Plesk for Windows) Configuring Centralized SSL Certificate Support in Plesk
      • Protecting Against Clickjacking
      • Protecting Against Open Redirect
      • PCI DSS Compliance
        • Tune Plesk to Meet PCI DSS on Linux
        • Tune Plesk to Meet PCI DSS on Windows
    • Ports Used by Plesk
    • Running Plesk Behind a Router with NAT
    • (Plesk for Windows) Configuring Port Range for Passive FTP Mode
    • Changing Your Password and Contact Information
    • Plesk Components
      • Adding and Removing Plesk Components
    • (Plesk for Linux) Cgroups Manager
    • Managing Plesk from Mobile Devices
    • Plesk Inside Virtuozzo Containers
    • Subscribing to Plesk Newsletters
    • Plesk Technical Reports
    • Plesk UI Notifications
    • Repair Kit
    • Plesk Repair Utility
      • Plesk Repair Utility: All
      • Plesk Repair Utility: Mail
      • Plesk Repair Utility: Web
      • Plesk Repair Utility: DNS
      • Plesk Repair Utility: FTP
      • Plesk Repair Utility: File System
      • Plesk Repair Utility: Plesk Database
      • Plesk Repair Utility: MySQL
      • Plesk Repair Utility: Microsoft SQL Server
      • Plesk Repair Utility: Installation
    • Managing ICP Permits
    • The Plesk Firewall (Linux)
    • The Plesk Firewall (Windows)
    • Using Docker
    • Using Node.js
    • Panel.ini Configuration File
    • Managing Let’s Encrypt Settings
  • Customizing the Plesk Interface
    • Appearance and Branding
      • Interface Preferences
      • Administrator’s Interface Language
      • Setting Up Supported Languages
      • Adding and Removing Custom Buttons
      • Branding and Themes
    • Using Custom Themes
      • Obtaining a Theme Package from Plesk
      • Modifying the Files
      • Installing Themes to Plesk
      • Removing Themes from Plesk
      • Choosing the Color Scheme
    • Hiding and Changing Plesk GUI Elements
      • Domain Registration and Management Services
        • Location of Domain Registration and Domain Management Buttons
        • Changing Domain Name Registrar’s URLs
        • Hiding Domain Registration and Domain Management Buttons
      • SSL/TLS Certificates Selling Services
        • Locations of Links for Purchasing and Viewing SSL/TLS Certificates
        • Changing SSL/TLS Certificate Seller’s URLs
        • Hiding Buttons for Viewing and Purchasing SSL/TLS Certificates
      • Link to Provider’s Website
        • Location of the Link to Provider’s Website
        • Changing the URL of the View Services Button
        • Hiding the View Services Button
      • Presence Builder Buttons
        • Location of the Presence Builder Buttons
        • Hiding the Presence Builder Buttons
      • Mail Service Controls
        • Location of the Mail Service Controls
        • Hiding the Mail Service Controls
        • Displaying the Mail Service Controls
      • Promos
        • Location of Promos
        • Creating a Promo
        • Hiding Plesk Promos
      • Link to Online Support Service
        • Creating Link to Support Form on Your Site
        • Creating Link to Compose Email Message
      • The Join Us on Facebook Button
        • Location of the Join Us on Facebook Button
        • Hiding the the Join Us on Facebook Button
      • The Twitter Follow Button
        • Location of the Follow Button
        • Hiding the Follow Button
      • Product Rating Widget
        • Location of the Widget
        • Hiding the Widget
      • RSS Feeds
      • Voting for New Features
  • Plesk Updates
  • Plesk Extensions
    • Extensions Catalog
    • Reselling Extensions
    • Let’s Encrypt
    • Social Login
  • Statistics and Monitoring
    • Action Logs
      • Setting Up Action Logging
      • Downloading the Action Log
      • Clearing the Action Log
    • Viewing Statistics
      • Automating Report Generation and Delivery by Email
      • Viewing Virus and Spam Protection Statistics (Windows)
      • About Disk Space Usage Calculation
    • Advanced Monitoring
    • Monitoring Connections to Plesk
  • Backing Up and Restoration
    • Global Backup Settings
    • Configuring Remote Storage
    • Backing Up the Entire Server
    • Backing Up Individual Accounts and Sites
    • Scheduling Backups
    • Incremental Backup
    • Backup Logs
    • Restoring Data from Backup Archives
    • Downloading Backup Files from Server
    • Uploading Backup Files to Server
    • Removing Backup Files from Server
  • File Sharing
    • File Sharing Settings
    • Accessing and Working with Files
      • Connecting to Web Folders on Microsoft Windows Systems
      • Connecting to Web Folders on Linux Systems
      • Connecting to Web Folders on Mac OS
  • Customers and Resellers
    • Hosting Plans and Subscriptions
      • Relationship Between Plans and Subscriptions
      • Setting Up Hosting Plans
        • Specify Plan Properties
        • Offer Additional Services
      • Setting Up Add-on Plans
      • Subscribing Customers to Plans
      • Managing Customers
      • Managing Subscriptions
      • Serving Non-Technical Customers
    • Reseller Plans
      • Setting Up Reseller Plans
      • Subscribing Resellers to Plans
      • Converting Resellers into Customers
      • Helping Resellers Manage Their Subscriptions
    • Quick Navigation Among Plesk Objects
  • Website Management
    • Quick Start with Plesk
      • Set Up Your First Website
        • 1. Create Your Site
          • Presence Builder
          • Content Management Systems
          • Uploading Content
            • Uploading Content Using FTP
            • Uploading Content with File Manager
        • 2. Preview Your Site
        • 3. Submit Your Sites to Search Engines
      • Set Up Mail Accounts
        • 1. Create Mail Account
        • 2. Access Your Mailbox
          • Access from Webmail
          • Access from Microsoft Office Outlook 2016
          • Access from Microsoft Outlook Express
          • Access from Mozilla Thunderbird
          • Access from Apple Mail
          • Access from iPhone
          • Access from Gmail on Android
          • Access from Microsoft Outlook on Android
      • View Site Visit Statistics
    • Customer Account Administration
      • Changing Your Password and Contact Information
      • Viewing Subscription Summary
        • Allocated and Consumed Resources
        • Hosting Features Available for Your Websites
        • Permissions Available for Your Website
      • Viewing Statistics
      • Log Files
      • Managing Additional User Accounts
        • Additional User Accounts
        • Creating Custom Buttons
    • Websites and Domains
      • Domains and DNS
        • Adding and Removing Domains
        • Adding Subdomains
        • Adding Domain Aliases
        • Adding Wildcard Subdomains (Linux)
        • Adding a Domain Forwarder
        • Configuring DNS for a Domain
          • Plesk as a Master DNS Server
          • Managing DNS records
          • Applying DNS Template Changes (Plesk for Linux only)
          • Plesk as a Slave DNS Server
          • Registrar’s DNS Settings in Plesk
          • Additional Operations on Domains
          • Configuring DNS via Domain Connect
          • Putting a Website Online via Domain Connect
          • Adding additional third-party services
        • Configuring DNSSEC for a Domain
      • Hosting Settings
        • General Settings
          • Hosting Types
          • Standard Forwarding
          • Frame Forwarding
          • Website Status
          • Suspended Sites
          • Disabled Sites
          • Active sites
        • Web Scripting Settings
          • PHP Settings
          • Choosing the PHP version
          • Choosing the handler type
          • Configuring additional settings
          • Enabling PHP Acceleration
          • Viewing the PHP settings
          • Inheriting PHP settings
          • PHP Handler Types
          • ASP.NET Settings (Windows)
        • Web Server Settings
          • Apache and Nginx Settings
          • Known limitations
          • Serve all static content via nginx
          • Serve only files with specific extensions via nginx
          • Serve all static and dynamic content via Apache
          • IIS Web Server Settings
          • Common Settings
          • Directory Security Settings
          • Access Restriction Settings
          • The Default Value of Server Settings
      • Website Content
        • Presence Builder
        • Content Management Systems
        • Uploading Content Using FTP
        • Uploading Content with File Manager
        • Setting File and Directory Access Permissions
        • Deploying Content Using Git
      • Restricting Access to Content
      • Site Descriptions
      • Previewing Websites
      • Web Applications
      • Extended Website Management
        • Working with a Staging Site
        • Setting Up Custom Error Pages
          • Setting Up Custom Error Pages on Windows Servers
          • Setting Up Custom Error Pages on Linux Servers
        • Hosting Personal Web Pages Under Your Domains
        • Limiting Bandwidth and Number of Connections to Websites
        • Using Virtual Directories (Windows)
          • Creating Virtual Directories
          • Configuring ASP.NET for Virtual Directories
          • Configuring PHP for Virtual Directories
          • Setting Up Access to Virtual Directories
          • Changing Virtual Directory Settings
          • Adding and Removing MIME Types
        • Setting Up IIS Application Pool (Windows)
        • Web Publishing with Web Deploy (Windows)
      • (Advanced) Website Security
        • Securing Connections with SSL/TLS Certificates
          • Securing Connections with the SSL It! Extension
          • Protecting Your Website With an SSL/TLS Certificate
          • Protecting Your Website With a Self-Signed SSL/TLS Certificate
          • Purchasing an SSL/TLS Certificate From a Certificate Authority
          • Purchasing an SSL/TLS Certificate via Plesk
          • Getting Free SSL/TLS Certificate from Let’s Encrypt
          • Getting Free Wildcard SSL/TLS Certificates from Let’s Encrypt
          • Protecting Webmail with an SSL/TLS Certificate
        • Protecting Sites from Hotlinking (Windows)
    • WordPress Toolkit
    • Git Support
      • Using a Local Repository
      • Using remote Git hosting
    • Ruby Support (Linux)
      • Manage Ruby Applications
      • Manage Ruby Versions via CLI
      • Run Rake tasks
    • Node.js Support
    • Creating Sites with Presence Builder
      • Getting Familiar With Presence Builder
      • Creating a Website
      • Importing Sites from SiteBuilder 4.5
      • Editing Websites
        • Structure: Pages and Navigation
          • Adding and Removing Pages
          • Adding and Removing Navigation Links
        • Design: Design Templates, Layout, Styles, Color Scheme, and Header
          • Selecting a Website Design Template
          • Selecting and Applying a Design Template
          • Preparing a Custom Design Template
          • Importing and Applying a Custom Design Template
          • Changing Your Website Layout
          • Selecting Website Colors, Background Images, Fonts, and Styles for Borders and Corners
          • Changing the Website Header Elements
        • Content: Text, Tables, Images, Video, Forms, and Scripts
          • Text, Tables, Hyperlinks, Flash Files, and Images
            • Hyperlinks, Links to Email Addresses, and Anchors
          • Image Gallery
          • Image Slider
          • Embedded Video
          • Contact Form
          • Blog
          • Commenting
          • Documents and Other Downloadable Files
          • Buttons for Sharing on Social Networks
          • Site Search
          • Online Store
          • Map
          • (Advanced) Custom Scripts
          • Advertisements
          • Twitter Feed
          • Amazon aStore
        • Multi-Language Websites
        • Settings and Tools for Webmasters
      • Saving and Loading Copies of a Website
      • Optimizing Sites for Mobile Devices
      • Publishing a Website to the Internet
      • Publishing a Website Copy to Facebook
      • Viewing Site Visits Statistics, Comments, and New Orders on the Dashboard
      • Deleting Websites
    • FTP Access to Your Websites
      • Changing FTP Access Credentials
      • Adding FTP Accounts
      • Setting Up Anonymous FTP Access
    • Mail Settings
      • Mail Settings of Domains
      • Adding Mail Accounts
      • Mail Account Settings
        • Changing Mail Account Password
        • Setting Up Mail Forwarding
        • Creating Mail Aliases
        • Setting Up Auto-Reply
        • Protecting from Spam
        • Protecting from Viruses
        • Additional Services
      • Limiting Outgoing Mail
      • Using Mailing Lists (Windows)
    • Scheduling Tasks
    • Website Databases
      • Creating Databases
      • Accessing Databases
      • Viewing Connection Information
      • Copying Databases
      • Backing Up and Restoring Databases
      • Exporting and Importing Database Dumps
      • Managing Database User Accounts
      • Setting Up Custom Access Rules
      • Checking and Repairing Databases
      • Moving a Database to Another Subscription
      • Accessing Databases with ODBC (Windows)
    • Backing Up and Recovering Websites
      • Backing Up Data
        • Backing Up the Account and Websites
        • Using Database Backup Storage (Windows)
        • Scheduling Backups
      • Uploading, Downloading, and Removing Backups
      • Restoring Data
        • Restoring Backups
        • Post-Restoration Database Repair (Windows)
  • Appendix A: Properties of Hosting Plans and Subscriptions
    • Visibility of Hosting Features in the Customer Panel
    • Resources
    • RAM, CPU, Disk I/O Management (Linux)
    • Permissions
    • Hosting Parameters
      • PHP Settings
    • Web Server (Apache)
    • Mail
    • DNS
    • Performance
    • Logs and Statistics
    • Applications
    • Additional Services
  • Appendix B: Properties of Reseller Plans and Subscriptions
    • Resources
    • Permissions
    • IP Addresses
    • Applications
Administrator's Guide
  • Docs »
  • Plesk Administration »
  • Securing Plesk

Securing Plesk¶

This section describes the best practices and settings that can increase the security of your Plesk and, thus, protect it from various types of attacks and loss of sensitive data:

  • Restricting Administrative Access
  • Restricting Remote Access via Plesk API
  • Setting Up the Password Strength Policy
  • Using Secure FTP
  • (Plesk for Windows) Custom Handlers Policy
  • SSL/TLS and Shared IP Addresses
  • Securing Plesk and the Mail Server With SSL/TLS Certificates
  • (Plesk for Windows) Configuring Centralized SSL Certificate Support in Plesk
  • Protecting Against Clickjacking
  • Protecting Against Open Redirect
  • PCI DSS Compliance

© Copyright Plesk

Dutchwebhosting.nl voor al uw hosting oplossingen. Snelle en betrouwbare hosting servers. Vanaf heden ook dedicated email pakketten tot wel 75 GB ruimte! Op zoek naar een virtual private server of dedicated private server? Kijk dan snel op Dutchwebhosting!