rat Comodo cwatch Web Security Software Version 1.1 Quick Start Guide Guide Version 1.1.092117 Comodo Security Solutions 1255 Broad Street Clifton, NJ 07013
Comodo cwatch Web Security Quick Start Guide cwatch Web Security is a cloud-based security intelligence service that continuously monitors and protects websites against millions of attacks and threats. In addition to website protection. cwatch Web Security includes a subscription to the Cybersecure content delivery network (CDN), helping to accelerate your websites performance. This document explains how website administrators can purchase licenses, enroll domains and use the cwatch interface. Purchase Domain License(s) Login to cwatch Enroll Domains Using cwatch Interface Purchase Domain Licenses If you haven't done so already, please select a cwatch plan at https://cwatch.comodo.com/pricing.php. Licenses are charged per-domain. You can add any number of domains to a license. You can add multiple license types to your account if you wish to implement different protection levels on different domains. You can associate domains with specific licenses in the cwatch interface. Available license types are: Basic Pro Premium The following table shows the features and services available with each license type: Feature/Service Basic Pro Premium Bandwidth (Content Delivery Network service) 4GB 10GB 40GB Daily Malware Scanning Daily Vulnerability Scanning Automatic Malware Removal Website Blacklist Monitoring & Removal Upon request 12 hours 6 hours Website Phishing Monitoring & Removal Upon request 12 hours 6 hours Weekly Security Reports Web Application Firewall Secure CDN (31 Pops, 100% SLA ) Edge SSL Comodo cwatch Web Security - Quick Start Guide 2017 Comodo Security Solutions Inc. All rights reserved. 2
SIEM Integration Customer Alert Mechanism DDOS (10 TB protection) Application Intelligent Networking Website Acceleration Static/Dynamic Content Caching Fully Managed WAF Virtual Patch OWASP Top 10 Blocking PCI Reporting for WAF 24/7 Incident Handling and Response FP Removal per Domain Human Verified Alerting Manual Malware Removal Once you complete the purchase process: If you are a new user, a Comodo account will be created for you at https://accounts.comodo.com. An email containing your subscription ID and the link to activate your account will be sent to you. You can activate your account by following the link in the mail. If you are an existing user, an acknowledgment mail will be sent to you containing your license key. Please save your license key in a safe location. Next, login to cwatch at https://login.cwatch.comodo.com/login Login to cwatch You can login into the cwatch admin console at https://login.cwatch.comodo.com/login using any browser: Comodo cwatch Web Security - Quick Start Guide 2017 Comodo Security Solutions Inc. All rights reserved. 3
If you are logging-in for the first time, please use the username and password provided in the cwatch account confirmation email. After your first login we strongly recommend you change your password for security reasons. Enroll Domains The cwatch console allows you to add and configure domains for cwatch protection and for site acceleration via the content delivery network (CDN). The number of domains that can be added to your account depends on your license as explained here. To add a new domain Login to cwatch at https://login.cwatch.comodo.com/login with your Comodo account credentials. The dashboard will appear by default. Click 'Register New Domain' at top-right to start the domain configuration wizard: Comodo cwatch Web Security - Quick Start Guide 2017 Comodo Security Solutions Inc. All rights reserved. 4
The wizard contains seven steps: Step 1 - Register your Domain Step 2 - Configure your CDN Settings Step 3 - SSL Protection Settings Step 4 - Vulnerability Scan Settings Step 5 - Malware Scan Settings Step 6 - FTP Settings Step 7 - Finalization Note: Only the first step, registration, is mandatory to add your domain to cwatch. Although steps 2-6 need to be completed at some point, you can do these later in the domain's 'Settings' area if you wish. You can jump to specific steps in the setup wizard by clicking the 'Next' button. Comodo cwatch Web Security - Quick Start Guide 2017 Comodo Security Solutions Inc. All rights reserved. 5
Step 1 - Register your Domain The first step allows you to register your domain and select the license to be associated with the domain. Domain Registration Form Parameter Domain Name Description Enter the name of the domain to be registered. Do not include 'www' at the start. License Choose the license which you wish to associate with the domain. The drop-down displays all licenses that you have purchased. cwatch features and CDN traffic limits vary according to the license type. See license types table for more details. Click 'Register and Next' Your domain will be added to the cwatch console. Steps 2-6 must be completed to properly set up cwatch, but you can configure them later in the 'Settings' page of the domain if you wish. Refer to the online guide at https://help.comodo.com/topic-285-1-900-11501-comodo-cwatch-web-security---domain- Configuration.html assistance with this. To configure the domain now, continue the wizard. Step 2 - Configure your CDN Settings You must configure your domain to use the CDN service in order for domain traffic to be monitored. Once configured, the CDN service will: Comodo cwatch Web Security - Quick Start Guide 2017 Comodo Security Solutions Inc. All rights reserved. 6
Accelerate performance by delivering your website content to your visitors from data centers closest to their location. The amount of CDN traffic available for a domain depends on the cwatch license active on the domain. See license types table for more details. Forward event logs to the Comodo CSOC team who will monitor your traffic to identify anomalous behavior and threats. Provide Comodo web application firewall protection for your domains. The CSOC team constantly improves the Mod Security rules in Comodo web application firewall to provide cutting edge protection for our customers. Once your domain has been registered (step 1), cwatch will generate a CNAME DNS record for it in step 2. Add this record to the DNS entry for your domain to route your site traffic through the CDN. Your web host may be able to help you with this step. Guidance is also available at https://support.google.com/a/topic/1615038?hl=en. Comodo cwatch Web Security - Quick Start Guide 2017 Comodo Security Solutions Inc. All rights reserved. 7
It may take up to 20 minutes for the CDN to receive the traffic to your domain. Once it has started, you can view traffic statistics on the 'CDN Metrics' page for the domain. See the online help page for Content Delivery Network Metrics for more details. You can get the CNAME record at any time by clicking the domain name on the left then 'Settings' > 'CDN Settings'. See the online help page for Configuring CDN Settings for more details. Step 3 - SSL Protection Settings This step lets you specify the SSL certificate you wish to use to secure traffic on the domain. Click 'Create or Update SSL certificate' if you already have a certificate for the domain issued by a trusted Certificate Authority (CA). The form on the next page will allow to to upload the certificate. Click 'I do not have a certificate' to apply for a new certificate from Comodo CA. Comodo cwatch Web Security - Quick Start Guide 2017 Comodo Security Solutions Inc. All rights reserved. 8
You need to upload the certificate and its private key. You should also upload any intermediary certificates. SSL Protection Settings Table of Parameters Parameter Description Certificate Paste the PEM content of your certificate. Comodo cwatch Web Security - Quick Start Guide 2017 Comodo Security Solutions Inc. All rights reserved. 9
SSL Chain Certificate Certificate Key Paste the PEM content of the intermediate certificate. This is optional. Enter the private key of your certificate Click 'Create New SSL Certificate' after pasting the certificate content and the key cwatch will create a new certificate and bind it with the domain for data transfer through the Cybersecure CDN. Click 'Next' Step 4 - Vulnerability Scan Settings cwatch scans your domain against the types of vulnerabilities published in the Open Web Application Security Project (OWASP) top ten list. It automatically blocks any of these threats that it discovers. You can view the scan results from the Vulnerabilities page for the domain. See the online help page for Comodo Vulnerability Scan Results for more details. Step 4 in the domain registration wizard allows you run an on-demand vulnerability scan on your domain. To start an on-demand click the 'Start Scan' The vulnerability scan on the domain will start. Alerts will be generated if any vulnerabilities are found. You can view the details about detected vulnerabilities in the 'Vulnerabilities' interface. Click 'Next' Comodo cwatch Web Security - Quick Start Guide 2017 Comodo Security Solutions Inc. All rights reserved. 10
Step 5 - Malware Scan Settings You need to upload a.php file to your domain in order to configure malware scanning. cwatch will access the file at the location you specify and commence scanning your website. To configure malware scans: Click 'Download the.php scan file' Upload the file to a publicly accessible location on your domain Enter the URL of the file in the text field and click 'Save' cwatch will access the.php file and begin scanning your website according to a schedule. Your domain will be scanned in 12 hour intervals and the results will be displayed in the 'Malware' page of the domain. See the online help page for Comodo Malware Scan Results for more details. Step 6 - FTP Settings cwatch allows you to create support tickets for various requests like removal of malware from domains, Comodo cwatch Web Security - Quick Start Guide 2017 Comodo Security Solutions Inc. All rights reserved. 11
whitelisting/blacklisting IP addresses, whitelisting of items so they are excluded from website scans and more. cwatch technicians from Comodo will attend the requests to resolve the issues. To allow cwatch technicians to access the files on your domain, you need to provide the FTP server details of your domain. Step 6 of the Domain Configuration wizard allows you to provide the secure FTP server details. s/ftp Settings - Table of Parameters Parameter FTP Hostname FTP Username/ FTP Password FTP Directory FTP Port Enter the hostname of your FTP server Description Enter the username and password of the account to be used by cwatch to access the FTP server Enter the path to the location of the domain in the FTP server. Enter the port through which the domain can be securely accessed. Comodo cwatch Web Security - Quick Start Guide 2017 Comodo Security Solutions Inc. All rights reserved. 12
Click 'Save FTP Settings' to confirm your settings. Click 'Next' Step 7 - Finalization The final step indicates you have completed the wizard: Click 'Get Started'. Your new domain will be added to your account and the features will be activated as per the license chosen for the domain. Using the cwatch Interface Once you have registered a new domain it will be listed on the left-hand menu. You view threat statistics and configure the domain by selecting an option below the domain name: Comodo cwatch Web Security - Quick Start Guide 2017 Comodo Security Solutions Inc. All rights reserved. 13
Dashboard - Overall statistics on all domains that are protected and managed. Alert - Shows all notifications about malware and vulnerabilities discovered on the domain. See https://help.comodo.com/topic-285-1-848-11493-view-alerts.html for more details. Overview - At-a-glance summary of security status and CDN performance. Refer to https://help.comodo.com/topic-285-1-848-11010-domain-overview.html for more details. Vulnerabilities - Lists all threats in the OWASP top ten that have been blocked by cwatch. You have the option to submit a ticket to Comodo Labs to remove the threats. Refer to https://help.comodo.com/topic-285-1-848-11492- Comodo-Vulnerability-Scan-Results.html for more details. Malware - Summary of the number of files scanned so far and their trust levels. You have the option to submit a ticket to remove any malicious files. See https://help.comodo.com/topic-285-1-848-11011-comodo-malware- Scan-Results.html for more details. COSC - Shows a real-time analysis of attack patterns on your domain from the Comodo Security Operations Center. See https://help.comodo.com/topic-285-1-848-11494-cyber-security-operation-center-results.html for more details. CDN Metrics - Shows data about your content delivery network traffic. This includes total usage, data throughput and the locations from which your traffic originated. See https://help.comodo.com/topic-285-1-848-11495- Content-Delivery-Network-Metrics.html to find out more. Ticket - Allows you to view, open and manage your support requests for the domain. You can create tickets to request Comodo to whitelist or blacklist items or to clean malware from your domain. See https://help.comodo.com/topic-285-1-848-11014-viewing-and-managing-support-tickets.html to learn more. Settings - Allows you to configure domain malware scanning, CDN coverage, FTP access and SSL certification. Refer to https://help.comodo.com/topic-285-1-848-11496-domain-configuration.html to find out more. Comodo cwatch Web Security - Quick Start Guide 2017 Comodo Security Solutions Inc. All rights reserved. 14
About Comodo The Comodo organization is a global innovator of cybersecurity solutions, protecting critical information across the digital landscape. Building on its unique position as the world's largest certificate authority, Comodo authenticates, validates and secures networks and infrastructures from individuals to mid-sized companies to the world's largest enterprises. Comodo provides complete end-to-end security solutions across the boundary, internal network and endpoint with innovative technologies solving the most advanced malware threats, both known and unknown. With global headquarters in Clifton, New Jersey, and branch offices in Silicon Valley, Comodo has international offices in China, India, the Philippines, Romania, Turkey, Ukraine and the United Kingdom. For more information, visit comodo.com. Comodo Security Solutions, Inc. 1255 Broad Street Clifton, NJ, 07013 United States Email: EnterpriseSolutions@Comodo.com Comodo CA Limited 3rd Floor, 26 Office Village, Exchange Quay, Trafford Road, Salford, Greater Manchester M5 3EQ, United Kingdom. Tel : +44 (0) 161 874 7070 Fax : +44 (0) 161 877 1767 Comodo cwatch Web Security - Quick Start Guide 2017 Comodo Security Solutions Inc. All rights reserved. 15