Firewall Disabled on WP Engine

  • kksolutions

    (@kreativesolutionsllc)


    4 months, 3 weeks ago

    On my WP Engine websites, I received an email alert indicating, “Critical Problems: * Web Application Firewall is disabled.”

    The firewall has been enabled & protecting for years… until today.

    When I login and re-activate the firewall, I also saw the following notice, “The WAF storage engine is currently set to mysqli, but Wordfence is unable to use the database. The WAF will fall back to using local file system storage instead.”

    WP Engine Support indicated,

    “Everything seems to be ok on WP Engine’s end in relation to that, considering WPEngine uses MySQLi automatically and nothing has changed about that.

    I’ve just double checked with out team and there’s no known events or issues related to that on our side at the moment.

    I would suggest if possible to contact WordFence to obtain more information about this if possible.”

    Followed by, “Just having a look and all looks good on our end as far as we can see. Since this is a 3rd party plugin, if you could check with Wordfence on this to get an insight from them and get back to us if there are any changes that needs to be made.”

    Can anyone help?

Viewing 9 replies - 1 through 9 (of 9 total)

  • This is happening to everyone with WPengine + Wordfence. They are claiming it isn’t them. It started about 4 hours ago.

    Thread Starter kksolutions

    (@kreativesolutionsllc)

    Thank you!, @webshaun! All my sites have been generating alerts over the last two hours or so… I was wondering if I was the only one. Glad, it’s not just me ??

    • This reply was modified 4 months, 3 weeks ago by kksolutions.
    Plugin Support wfscott

    (@wfscott)

    Hello, @kreativesolutionsllc

    Thanks for reaching out. We’ve been in contact with WPEngine and they are aware of the issues. This appears to be due to a recent change they made, and they are looking into it on their side. I do recommend checking back with their support shortly for an update.

    Thanks,
    Scott

    Thread Starter kksolutions

    (@kreativesolutionsllc)

    Thank you so much @wfscott! I appreciate the update and peace of mind. All my WP Engine sites starting going off in the last hour or two, while my other sites on other hosts are working as expected. It seemed like it was a recent host-related change.

    I got a backup of all my sites. I know it’s unlikely, but I don’t like seeing all my websites WAF reporting offline.

    • This reply was modified 4 months, 3 weeks ago by webshaun.
    Plugin Author Wordfence Security

    (@mmaunder)

    If you need a quick fix you might try this. As Scott said, WPEngine appear to be working on the issue.

    https://x.com/wordfence/status/1807936913447301193

    Regards,

    Mark.

    Plugin Author Wordfence Security

    (@mmaunder)

    About 1 hour ago WPEngine initiated a deploy to revert the changes that caused this. The deploy will take 3 to 6 hours to run. So should be finished around 2pm US Eastern time at the latest. This according to an email update they sent us an hour ago.

    Regards

    Mark

    Thread Starter kksolutions

    (@kreativesolutionsllc)

    Excellent, thank you for the update! I implemented the temporary fix last night but it is great to know the issue will be resolved today.

    Thread Starter kksolutions

    (@kreativesolutionsllc)

    3 out 3 websites are functioning as expected and no notice is visible. The temporary fix was implemented last night. Is it okay to leave that code or do I need to remove it?

    The temporary fix code was the followed that was inserted in wordfence-waf.php: if(!defined(‘WFWAF_DB_HOST’)) { define(‘WFWAF_DB_HOST’, isset($_ENV[‘WPE_DATABASE_HOST’]) ? $_ENV[‘WPE_DATABASE_HOST’] : ‘127.0.0.1:3306’); }

    Thank you to everyone who worked on the temporary & final resolution!

Viewing 9 replies - 1 through 9 (of 9 total)
  • The topic ‘Firewall Disabled on WP Engine’ is closed to new replies.

Tags