Cannot use ModSecurity for SharePoint 2013

Question

I'm trying to use ModSecurity for SharePoint sever.

I have a windows server 2012 with iis 8.5 and sharepoint 2013 installed.

I also installed modsecurity and configed follow https://forums.iis.net/post/2103335.aspx with the file web.config in C:\inetpub\wwwroot\wss\VirtualDirectories\80 I had this error:

The element 'system.webServer' has invalid child element 'ModSecurity' ...

SharePoint server worked.

Modsecurity worked when I switch web server to iis default web.

Can anybody help me, please?

Answer 1

I fixed my problem a few hours ago.

The resolution is simply replacing ModSecurity by modsecurity in the files applicationhost.config and web.config

Answer 2

I'm pretty sure that this is not supported. So don't do it! Web.config files are managed automatically by Sharepoint, and there's not just one Web.config file.

As for your issue, which you should not fix given the above, you're most likely missing the configSection pieces...