Feature Suggestions
Please provide here your suggestion for new functionality for Plesk. We encourage you to review and vote for suggestions of others. The top-ranked suggestions are likely to be included in the next versions of Plesk.
Please write in English so that voters from all over the world can read and support your request.
Off-topic posts will be removed from here
128 results found
-
More customizable password strength
Please consider implementing more options for customization of password strength - for example disalbing it, setting allowed password to have lower than 5 symbols or the opposite - increase number of symbols required for a password.
17 votesThank you for your input! We will consider this functionality in upcoming releases if it will be popular.
Everyone, please continue voting for this feature if you consider it important.
—
IG -
7 votes
-
Use Lets Encrypt to secure FTPs connections
Hi,
I usually use the ftp.site.com subdomain for the client FTP connections.
And to secure those connections I enabled FTPs. But at this point the users receive a certificate host name mismatch because the FTPs connection is being setup using the VPS Lets Encrypt cert.It would be nice to use the Lets Encrypt certificate service also to secure the FTPs connections.
Thanks!
387 votesThank you for your input! We will consider this functionality in upcoming releases if it will be popular.
Everyone, please continue voting for this feature if you consider it important.
— AY
-
15 votes
Thank you for the update! We will consider this functionality in upcoming releases if it will be popular.
Everyone, please continue voting for this feature if you consider it important.
—
IG -
Have a "call-in PIN" (support phone password) field in each user account
I think a call in pin would be nice. Something that the user can change, but it is kept hidden unless they are logged in and click on it to see it. This will allow for end users to request help securely.
3 votesThank you for your input. We will consider this functionality in upcoming releases if it is popular. Everyone, please continue voting for this feature if you consider it important.
—
IG -
Description field for IP restrictions
Here is my idea : add a description field for IP administration restriction access
6 votesThank you for your input! We will consider this functionality in upcoming releases if it will be popular.
Everyone, please continue voting for this feature if you consider it important.
—
IG -
Plesk Premium Email 2fa
Would like to see google auth 2fa enabled for login to webmail on Plesk Premium Email.
17 votes -
Security Policy per subscription
To be able to set specific security policy per subscription instead of server-wide.
9 votesThank you for your input! We will consider this functionality in upcoming releases if it will be popular.
Everyone, please continue voting for this feature if you consider it important.
—
IG -
Content Security Generator
A CSP Generator where you can define rules very simple.
10 votes -
control-panel-access - add ddns support
Please add DDNS Support for "control-panel-access" (Limit Admin Login) - Would be very helpful to restrict Admin Logins if no static IP Address is available ...
4 votesThank you for your input! We will consider this functionality in upcoming releases if it will be popular.
Everyone, please continue voting for this feature if you consider it important.
—
IG -
Let pci_compliance_resolver --enable postfix also set FORWARD SECURITY and go dor TLSv1.3
Even though server supports TLS 1.2, the cipher suite configuration is suboptimal. It is recommend to configure the server so that the cipher suites providing forward secrecy (ECDHE or DHE in the name, in this order of preference) and authenticated encryption (GCM or CHACHA20 in the name) are at the top. The server must also be configured to select the best-available suite!
also there is TLSv3 https://tools.ietf.org/html/rfc8446
(and draft is used already a long time by many;)http://www.postfix.org/TLS_README.html
And while Playing on Mailserver think about MTA Strict Transport Security (Draft standard) and Email DANE / TLSA.
THX
3 votesThis is a valid request, so we’ll look into it. There is no ETA at the moment, but we would really appreciate you voting for this request so that we can accurately assess its popularity relative to other features. Thanks in advance!
— rk
-
add permission to disable "certificate selection"
Add permission to disable "for certificate selection"
Use case: if "hosting management" permission is disabled in Subscription > Customize > Permissions > Hosting management - uncheck, an additional Plesk user still able to select SSL certificate in "hosting settings" of domain. User can set certificate to none and thus violate website security.
Add option in Permissions to forbid certificate selection by user to prevent such cases.
7 votesThank you for your input! We will consider this functionality in upcoming releases if it will be popular.
Everyone, please continue voting for this feature if you consider it important.—
IG -
fail2ban - Add Details (Login Name)
Often large Companies with lot's of Workstation are getting blocked because 1 Client in their Office is trying to log in with wrong Password (imap/pop/smtp) - then the whole Office of them is getting blocked and the search which PC/which User is causing the block.starts ...
It would help big times if one got a reference which Login Name / Username caused the block as additional Info next to the IP ...
Won't help on Brute Force Attacks where the Username changes ... but on this Scenario it would be a big Timesaver ...
Andreas Schnederle-Wagner6 votesThank you for your input! We will consider this functionality in upcoming releases if it will be popular.
Everyone, please continue voting for this feature if you consider it important.
—
IG -
Anonymize IP in logs instead of disabling them completely
It would be great to have an option to anonymize IP addresses, not to disable it completely to get rid of issues with statistics displaying. For example as it is for Plesk on Linux.
Currently, Plesk for Windows has an option to completely disable IP addresses logging In Tools & Settings > Server Settings which affects web statistics.
3 votesThank you for your input! We will consider this functionality in upcoming releases if it will be popular.
Everyone, please continue voting for this feature if you consider it important.
IB
-
Use of FQDN in the firewall
I would like to use FQDN in the plesk firewall instead of only IP addresses.
20 votesThank you for your input! We will consider this functionality in upcoming releases, if it will be popular.
Everyone, please continue voting for this feature if you consider it important.
—
IG -
ProFTPd with ClamAV support (mod_clamav)
Compile ProFTPd daemon with mod_clamav support, that FTP uploaded files can be scanned with malware.
cPanel & DirectAdmin support this:
https://github.com/jbenden/mod_clamav
and External Signatures with ClamAV:
6 votesThank you for your input! We will consider this functionality in upcoming releases if it will be popular.
Everyone, please continue voting for this feature if you consider it important.
— AY
-
Enhanced VPN support
Since VPN connection are more and more common, and mobile devices used to connect to monitor servers, there is a need for an enhancement on the old VPN Add-on on plesk (linux).
Currently the IOS and Android OpenVPN client does not support secret — Static key encryption mode (non-TLS) is not supported.
from https://docs.openvpn.net/docs/openvpn-connect/openvpn-connect-ios-faq.html
Which is the only way to use the Plesk VPN connection because it does not support certificates.
There is a lot of literature on troubles with VPN on mobile, but basically, all of them are due to old style, unsecured way to connect to VPN.Can…
56 votesThank you for your input! We will consider this functionality in upcoming releases if it will be popular.
Everyone, please continue voting for this feature if you consider it important.
—
AA -
Make default Plesk Firewall rules more strict
Right now "System policy for outgoing traffic" rule is set to allow all outgoing traffic as default which is not secure enough.
Please consider to make default firewall rules for outgoing traffic more secure and allow only Plesk services to send outgoing packets
5 votes -
8 votes
Thank you for your input! We will consider this functionality in upcoming releases if it will be popular.
Everyone, please continue voting for this feature if you consider it important.
—
IG -
Hotlink protection for Linux
A feature to help you configure the hotlink protection with nginx and apache
34 votes
- Don't see your idea?