• Hi, looking to protect a multisite with the Jetpack WAF, I’m wondering if this is possible with Jetpack Protect and how.

    Are all sites in the network are protected when a global auto_prepend_file is set and Jetpack Protect is only activated on the main site? Or does the plugin need to be activated on each subsite individually? If so, can de plugin be activated Network wide?

    Thanks for any info ??

Viewing 3 replies - 1 through 3 (of 3 total)
  • Leah

    (@lerrtle)

    Hi @ravanh, thanks for getting in touch.

    looking to protect a multisite with the Jetpack WAF, I’m wondering if this is possible with Jetpack Protect and how.

    Jetpack Web Application Firewall (WAF) does not currently support multisite. For a full list of which Jetpack features are supported in multisite installations, you can take a look at our guide here.

    Thread Starter Rolf Allard van Hagen

    (@ravanh)

    Okay, thanks Leah.

    “Multisite not supported,” does that mean it cannot be activated network-wide but still could be activated (and working) site per site? Or not possible at all?

    I’ve currently got Jetpack Protect WAF active on the network’s main site, and the PHP auto_prepend_file rule set on server level. It does not seem to be breaking anything but I guess it does not protect any of the sub-sites either, correct?

    Does it protect the main site (and login) at all, or not even that?

    Last question: are there any plans to support multisite for Jetpack Protect in the future? Wordfence does, but I’d prefer to keep plugins to a minimum…

    Plugin Support Alin (a11n)

    (@alinclamba)

    Hi @ravanh,

    Thanks for following up! I’d be happy to clarify your questions, let’s take them one by one.

    Jetpack Protect on Multisite. Currently, Jetpack’s WAF does not fully support multisite networks. This means that even though you’ve activated Jetpack Protect on the main site and set the auto_prepend_file rule at the server level, it will not protect the subsites. Each subsite would need to have Jetpack Protect activated individually, but there isn’t a way to activate it network-wide through the multisite admin.

    Protection on the Main Site. Yes, if you’ve activated Jetpack Protect on the main site, the WAF should protect the main site, including its login area. However, it won’t extend that protection to the subsites.

    Future Support for Multisite. I actually saw that you opened a feature request for this about some time ago but it’s currently marked as low priority. I’ll nudge the team about it, but just a heads-up—it might take a while to see any movement on this. I totally get why having multisite support would be a game-changer, though!

    I hope this helps, but if there are other questions, please let us know.

Viewing 3 replies - 1 through 3 (of 3 total)
  • You must be logged in to reply to this topic.