Cpanel / WHM Tour

Security

cPanel 11 offers greatly enhanced security through a combination of strengthened backend code, and many new utilities which allow you to provide fine grained security policies for your server. These numerous enhancements make it extremely easy to keep your servers locked down tight.

Public Key Authentication

Public Key Authentication allows your users to use a public and private key pair to access your server for SSH connections and Account Transfers. The use of public key authentication allows you to disable password authentication. This means that only those users that have access to a private key will be able to connect to your server, thereby enhancing your authentication security greatly.

cPHulk Brute Force Protection

cPanel 11 marks the debut for the much anticipated cPHulk Protection system. cPHulk protects your vital services by disabling authentication to those services after a brute force attack is detected. It protects: cPanel, WHM, SSH, FTP, IMAP, and POP3 from brute force authentication attacks. cPHulk will remain transparent to the attacker whose authentication attempts will feel normal, even while authentication is disabled. Thus, you can get substantial information about the attack. You can even customize authentication thresholds and lock out times!

Host Access Control

The best security policy is to not offer a connection to a service. However, that is not always realistic. Understanding that same principle, you can use the new Host Access Control feature to only provide access to a specific set of IP addresses to the services on your server, or to block access from specific IP addresses. With a simple to use interface, it's easy to prevent unwanted access to the services on your server.

Enhanced XSS Protection

Substantial backend changes have been made to further protect cPanel and WHM users from cross-site scripting. Many behind the scenes functions have been added to render such nuisances harmless.