plesk advisor score functionality needs enhancement
The Plesk advisor complains about not having installed the Plesk firewall, but it doesn't check iptables rules. I have setup my own iptables rules deriven and enhanced from the Plesk firewall. My setup also supports ipset rules which Plesk doesn't.
Thus, the advisor score mechanism should check if iptables rules are present and setup sophisticatedly.
Please refer to: https://talk.plesk.com/threads/plesk-firewall-2-1-5-412-still-has-problems.371747/page-2
Thank you for your idea! We will consider this functionality in upcoming releases if it will be popular.
Everyone, please continue voting for this feature if you consider it important.
-- PD
-
Brapion commented
I use CSF due to the limitations of the Plesk firewall current implementation. The Plesk Advisor penalises the security score by 310 points due to firewalld not being enabled and active.
The advisor should recognise that CSF is installed and running, remove the two warnings and add at least 310 points on to the score.