Archive: Knowledge Base

Block HTTP Cookies

A cookie is a small piece of data sent from a website and stored in a user’s web browser while the user is browsing that website. Every time the user loads the website, the browser sends the cookie back to the server to notify the website of the...

Read more

Protected Page

To provide an additional layer of security, Sucuri Firewall users can enable Protected Pages. Protected Pages restrict access to specific pages on your website and can also serve as an additional authentication layer for administrative panels. You...

Read more

Block HTTP Referers

Sucuri allows you to block unwanted visitors to your site based on where they come from or based on its referer. HTTP referer (originally a misspelling of referrer) is an HTTP header field that identifies the address of the webpage that is linked to...

Read more

Allow a URL Path

If you receive a Sucuri Access Denied message, such as the one below, when visiting pages on your site, you can allow the URL in the Sucuri Firewall settings to avoid the blocks for all users. Allowing a URL should be your last resort. It is only...

Read more

Country Blocking

Blocking the top three attack countries The majority of website attacks come from specific countries: China, Russia and Turkey. Although we have nothing against those countries, the Sucuri Firewall gives you the option of blocking them from...

Read more

Backend Timeout Message

When an application malfunctions, crashes, or delays, you may see the following message: The image depicts a 502 error in which case the Sucuri WAF cannot get a response from the site’s hosting server. To resolve this issue, please read...

Read more

IP is not valid

When trying to whitelist an IP address you might get the following error message: This means the IP address you are trying to whitelist is either a local IP address (10.0.0.0/8, 172.16.0.0/12 or 192.168.0.0/16) OR was typed incorrectly. You can only...

Read more

vBulletin Customizations

If you use vBulletin and you are unable to login to your forum even with the correct credentials and you end up getting: You have used up your failed login quota! Please wait 15 minutes before trying again. The solution is simple. This happens...

Read more

Same IP for All Users

In order to filter malicious requests, the WAF sits in the middle of the communication between the site’s visitors and the hosting server. Because of that, the connection is modified and the source IP at the network level will show as the...

Read more