Loading...

Knowledge Base

Getting Started with SiteLock

Want to learn how to set up SiteLock and fortify your website's defenses? You're in the right place! SiteLock is a site security service that runs daily scans to identify vulnerabilities, works to remove any identified harmful content, and helps safeguard your websites from possible threats like malware, bots, denial of service attacks, blacklisting, etc. This comprehensive guide will walk you through the entire process, ensuring your site remains shielded from any digital dangers.

After purchasing SiteLock service, you will notice Items in Process on your Account Manager home page. As soon as the service is ready to be set up, the status will change to Ready to Setup. Once you see this status, you can refer to the instructions provided in this article to help you set up your newly purchased service.

For more information, select from the options below:

The SiteLock® Packages are:

SiteLock Premium

  • Daily scan and malware removal with the option to automatically remove malware
  • Blacklist Monitoring
  • Automated Bot Blocking
  • You can also display a SiteLock Trust seal on your website.

SiteLock Defend

  • Continuous scan and malware removal with the option to automatically remove malware
  • Blacklist Monitoring
  • Automated Bot Blocking
  • Global Content Delivery Network (CDN) and Web Application Firewall (WAF) compatible with an SSL Certificate and blocks
  • Database Scanning
  • DDoS Protection
  • Automated Vulnerable Application Patching
  • OWASP’s top 10 threads.
  • You can also display a SiteLock Trust seal on your website.

SiteLock911

  • A full scan and complete clean-up of unwanted malware from your web pages within minutes—most malware scans and clean up are complete within two hours for an entire website.
  • Complete restoration of your website including removal from any blacklists
  • This service is a one-time malware fix for any website hacked.

SiteLock offers protection against modern-day cybercriminals who use modern-day technology to attack your website. It protects your site against malware, SQL injection or XSS attacks, DDoS attacks, and more. Below are the key features of SiteLock and their benefits:

  • Malware scanning - A website scanner will check your website for viruses, malware, and other types of cyber threats and alert you when there are security issues.
  • Automatic malware removal - When our website scanner detects malicious code from your website, it automatically removes it.
  • Automated vulnerable application patching - SiteLock's vulnerability scanner will check for vulnerabilities in your CMS before hackers cause any disruption to your website's functionality.
  • WAF (Web Application Firewall) - Protects your site against advanced cyber threats and the OWASP top 10 threats that could harm your site or cause it to be blacklisted from search engines.
  • CDN (Content Delivery Network) - Improves site speed and SEO (Search Engine Optimization).

What is the difference between SiteLock and SSL? As mentioned, SiteLock protects your website from hackers gaining access to its files and database. On the other hand, an SSL certificate protects your customers' sensitive information when they enter it on your website or while it is transmitted across the Internet.

To access SiteLock®, follow the steps below:

  1. Log in to your Account via https://www.networksolutions.com/my-account/login.
  2. On the left menu, click Security.

Red box around Security option
 

  1. On the My Security Products page, click the Manage button next to the SiteLock® product you want to set up.

Red box around Manage button for SiteLock product
 

Note: You can also set up SiteLock® from your Account Manager homepage by clicking SETUP under the Ready to Setup notification.
  1. To launch SiteLock®, click on the MANAGE SITELOCK button.

Manage SiteLock button
 

You have now accessed SiteLock. You will see a Configuration Alert for SMART and TrueShield. For steps to configure SMART and TrueShield, please see SMART Setup and Trueshield Setup below.

Configuration alert within SiteLock Dashboard
 

Important: Make sure you have set up FTP in your Hosting Control Panel or SFTP in your WordPress Control Panel before following the steps below.

SMART downloads a copy of your website to find and clean malware. If it finds malicious code on your website, it removes the code from your file and replaces it with clean files.

  1. In your SiteLock Dashboard, click the Configure button beside SMART. You also have the option to configure SMART by going to Settings, then selecting Download Settings.
     Settings section and Download Settings tab
     

  2. The screen may show two options, as shown in the image below. Select “I want to provide this data myself manually.” If these options do not show, proceed to step 3.

Checkmark on "I want to provide this data myself manually" option
 

  1. Fill out the following fields:
    Download settings form
     

  1. Method for File Transfers – select FTP, SFTP, or FTPS from the drop-down, depending on what your website is using.
    • If your domain is associated with our Web Hosting products, select FTP.
    • If your domain is associated with WordPress, select SFTP.
    • If your domain is hosted by a third-party Registrar, select FTPS if your website is using FTPS.
  2. FTP Host of IP Address – Enter your Host Address or IP Address. You can find your Host Address in your:
    • FTP Account Manager within your Hosting Control Panel, or
      Red arrow pointing at Hosting and red box around FTP Account Manager
       
    • SFTP Account Manager within your WordPress Control Panel.
      Red arrow pointing at WordPress and red box around SFTP Account Manager
       
    • You also have the option to use the IP address of your website. For more information on finding your IP address, please see How Do I Manage DNS and Advanced DNS Records?
  3. (S)FTP Port Number – Enter port 21 for FTP and FTPS or port 22 for SFTP.
  4. Root Directory field – Enter your File Path, which you can find in your FTP or SFTP Account Manager.
  5. USER ID – Enter your FTP username. Do not add a space before or after your username. SMART will not recognize usernames with % symbols or spaces.
  6. Password – Enter the FTP password. Do not add a space before or after your username. SMART will not recognize usernames with spaces.
  7. Speed for FTP file downloads – Select how many connections you want SMART to scan files.
  8. Maximum Download Time – Select how long you want SMART to scan files before it stops for the next day or cycle.
  1. Once you have filled out the necessary fields, click Save. You will see a green banner that confirms your changes have been saved.
  2. Next, go to SMART Settings.

SMART Settings highlighted in blue
 

  1. Select “Yes, automatically remove the malware found” from the drop-down, then click Save.

Option to automatically remove malware within SMART Settings
 

You have successfully configured SMART! It will now remove malware detected automatically.

Note: If you update your FTP password, make sure to update the Download Settings, so SMART continues to run.

You can find your SMART scan results by going to your Dashboard and clicking the View Details button under SMART.

Note: If you have an SSL certificate purchased elsewhere for this domain, you need to contact your Certificate Authority for the appropriate files to upload to the SiteLock dashboard using the steps below.
Important: These steps require that the SSL Certificate be issued and installed first. For instructions on how to set up an SSL Certificate, please refer to this article How to Get Started with an SSL Certificate.

TrueShield protects your website from common cyberattacks, such as Cross-Site Scripting and SQL Injection.

  1. In your SiteLock Dashboard, click the Configure button beside TrueShield. You also have the option to click the Configure button under TrueShield to set it up.
    Configure TrueShield button in red sqaure on the configuration alert pop-up
     
  2. On the Trueshield/Truespeed Activation page, you will see Step 1 Manage SSL.
    Note: If you see “Not Necessary at this time,” it means you do not have an SSL Certificate for your website. An SSL Certificate is needed to set up TrueShield.

Red box around Host and TXT Value fields
 

  1. Click the Validating Domain Ownership drop-down.
    • If your domain is hosted by Network Solutions®, check your DNS Manager to see if the TXT Value shown in SiteLock is added to your Advanced DNS Records. For instructions on checking or updating your TXT Record, please see How Do I Manage DNS and Advanced DNS Records?
    • If the TXT record is not added, it will say, “Site DNS returned no matching TXT record was found” in SiteLock. In that case, you must add the TXT record provided by SiteLock in your Advanced DNS Records. Once added, please allow 24 hours for DNS changes to propagate throughout the web.
    • If your domain is hosted by another provider, contact your provider to get the TXT record you need for SSL Validation, and refer to this article Add TXT Record for SSL Validation for instructions.
  2. After validating your domain, click the Manage Certificate drop-down.

Blue button to upload SSL Certificate
 

  1. Click the Upload Certificate button to upload your SSL Certificate and add it to your TrueShield service. Doing so will allow SSL traffic to route through TrueShield.
    Note: If you purchased your SSL Certificate from another provider, please contact them to get the files you need to upload the certificate in SiteLock.
  1. Click the SSL Traffic Flow drop-down to confirm whether your SSL is routing through TrueShield or not. For example:

SSL Traffic Flow drop-down
 

  1. Next, click Step 2 Manage Routing to see the records you must have in your Advanced DNS Records to route your traffic through SiteLock’s CDN.

Steps on what zone records to remove and add
 

  • If your domain is hosted by Network Solutions®, check your DNS Manager to see if the A records and CNAME record shown in SiteLock are added to your Advanced DNS Records. For instructions on checking or updating your DNS records, please see How Do I Manage DNS and Advanced DNS Records?
  • If the A records and CNAME record are not added, you must add them to your Advanced DNS Records. Once added, please allow 24 hours for DNS changes to propagate throughout the web.
  • If your domain is hosted by another provider, click here for instructions.
  1. Click Step 3 Install SiteLock Trust Seal. This step is optional. For steps on how to install your Trust Seal, please see Installing Trust Seal below.

Once you have successfully set up the Firewall, you can check your results by clicking the View Details button under TrueShield.

Note: You can only see your Firewall settings after you have set up TrueShield correctly. To access your Trueshield settings, go to Settings, then select Trueshield Settings.

Red arrow pointing at Settings and red box around TrueShield settings
 

Trust Seal shows site visitors that your website is safe and secure to visit and input their information. After you are done with Steps 1 and 2 in setting up TrueShield, you can proceed with installing your Trust Seal.

  1. Click the BEGIN TRUST SEAL INSTALLATION link in Step 3 of setting up TrueShield.

Red box around Begin Trust Seal Installation link

You can also start setting up Trust Seal from the SiteLock dashboard by clicking the Trust Seal badge in the Domain Statistics section.
Domain Statistics section
 

On the next page, you will see 3 steps:

  • Step 1: Choose a language - Select the language you want your Trust Seal to display by clicking the drop-down menu. Once you have selected a language, click the Next button to proceed to Step 2.
    Red box around Step 1 Choose a language
     
  • Step 2: Choose a color, size, and style - The options you choose will update the Trust Seal badge example on the right. Click the Next button to proceed to Step 3.Red box around Step 3 Choose color, size, and style
     
  • Step 3: Install SiteLock Trust Seal – Copy the code and insert it into your website. Please select from the options below for steps on inserting a code into your website:
  1. After you have added the code into your website, click the Save Configuration Settings button.

Please allow 24 hours for your Trust Seal to appear on your website.

Note: If Trust Seal does not appear, it may be due to various reasons (e.g., website infected with malware or changes in your website code). You must resolve these issues first for your Trust Seal badge to appear on your website.

Important: This applies to customers with SiteLock Defend or SiteLock Defend +911.

SSL scan ensures that your website has an active and functioning SSL certificate installed.

  1. In your SiteLock Dashboard, click the Configure button under SSL Scan.
  2. Enter the domain name that should be on your SSL Certificate in the Host Name field.
    Field to enter Host Name
     
  3. Click the Submit button.
  4. On your Dashboard, the SSL Scan tile will now show as Pending.

If the SSL certificate is valid, then the scan will successfully be configured. The status on the SSL Scan icon changes from Configure to Good.

Please allow 24 hours for SSL Scan to configure.

 

Review

Congratulations! You've successfully learned how to set up SiteLock, adding strong protection to your website. Remember, online security is an ongoing effort. Stay vigilant, keep your SiteLock settings updated, and focus on creating exceptional online experiences without the worry of cyber threats.

Did you find this article helpful?

 
* Your feedback is too short

Loading...