13 guides
Security and protection
Bots and overload, firewall, fail2ban, malware scans, a hacked store, admin protection and two-factor sign-in.
Security and protection
Bots and overload, firewall, fail2ban, malware scans, a hacked store, admin protection and two-factor sign-in.
- How Gen2 servers are securedThe layers that protect every server: updates, SELinux, firewall, SSH, fail2ban, per-application isolation, bot protection and backups.
- Bot and overload protection explainedHow the Protection tab keeps bots and botnets from overloading your store, with the settings and what each one does.
- The browser check: what visitors see and when it switches onA short page that stops bots and lets people through. When it runs on its own and how to turn it on or off.
- Block an IP address, a network or a user agentRefuse one address, a whole network or a bot by its user agent, per application, and undo it later.
- Reading the Traffic tab: visitors, funnel and botsVisitors, pages, requests and the bot share from the server's own log, the shop funnel and who is on the site now.
- Firewall rules: open ports, allow and block addressesWhich ports are open on a Gen2 server, and how to allow or block an address or a range on all or one port.
- Restrict SSH and SFTP to your own addressesClose the SSH port to the world and keep it open for your office, your developers and our platform.
- fail2ban: automatic bans and how to unbanWhich behaviour gets an address banned, for how long, and how to free an address that was banned by mistake.
- Malware scans: WhizzyScan and the deep file scanTwo scans for Magento and WordPress: what each one checks, how long it takes and how to read the report.
- My store was hacked: what to doThe first hour after you find malware, a card skimmer or a defaced page: contain, clean, close the hole, check.
- Protect the Magento adminAn IP allow-list and an extra password in front of the admin, set at the web server, plus the basics in Magento itself.
- Two-factor sign-in for your console accountAdd a code from an app on your phone to your ShopWhizzy sign-in, save the recovery codes and trust a device.
- IP blacklists and email reputationThe nightly blacklist check of your server's address, what a listing means and how to get off a list.
Still stuck? Ask a person.
Tickets go straight to the engineers who run ShopWhizzy servers. Tell us the store, what you see and when it started, and we take it from there.