Getting Started with SiteLock
Want to learn how to set up SiteLock and fortify your website's defenses? You're in the right place! SiteLock is a site security service that runs daily scans to identify vulnerabilities, works to remove any identified harmful content, and helps safeguard your websites from possible threats like malware, bots, denial of service attacks, blacklisting, etc. This comprehensive guide will walk you through the entire process, ensuring your site remains shielded from any digital dangers.
After purchasing SiteLock service, you will notice Items in Process on your Account Manager home page. As soon as the service is ready to be set up, the status will change to Ready to Setup. Once you see this status, you can refer to the instructions provided in this article to help you set up your newly purchased service.
For more information, select from the options below:
The SiteLock® Packages are:
SiteLock Premium
- Daily scan and malware removal with the option to automatically remove malware
- Blacklist Monitoring
- Automated Bot Blocking
- You can also display a SiteLock Trust seal on your website.
SiteLock Defend
- Continuous scan and malware removal with the option to automatically remove malware
- Blacklist Monitoring
- Automated Bot Blocking
- Global Content Delivery Network (CDN) and Web Application Firewall (WAF) compatible with an SSL Certificate and blocks
- Database Scanning
- DDoS Protection
- Automated Vulnerable Application Patching
- OWASP’s top 10 threads.
- You can also display a SiteLock Trust seal on your website.
SiteLock911
- A full scan and complete clean-up of unwanted malware from your web pages within minutes—most malware scans and clean up are complete within two hours for an entire website.
- Complete restoration of your website including removal from any blacklists
- This service is a one-time malware fix for any website hacked.
SiteLock offers protection against modern-day cybercriminals who use modern-day technology to attack your website. It protects your site against malware, SQL injection or XSS attacks, DDoS attacks, and more. Below are the key features of SiteLock and their benefits:
- Malware scanning - A website scanner will check your website for viruses, malware, and other types of cyber threats and alert you when there are security issues.
- Automatic malware removal - When our website scanner detects malicious code from your website, it automatically removes it.
- Automated vulnerable application patching - SiteLock's vulnerability scanner will check for vulnerabilities in your CMS before hackers cause any disruption to your website's functionality.
- WAF (Web Application Firewall) - Protects your site against advanced cyber threats and the OWASP top 10 threats that could harm your site or cause it to be blacklisted from search engines.
- CDN (Content Delivery Network) - Improves site speed and SEO (Search Engine Optimization).
What is the difference between SiteLock and SSL? As mentioned, SiteLock protects your website from hackers gaining access to its files and database. On the other hand, an SSL certificate protects your customers' sensitive information when they enter it on your website or while it is transmitted across the Internet.
To access SiteLock®, follow the steps below:
- Log in to your Account via https://www.networksolutions.com/my-account/login.
- On the left menu, click Security.
- On the My Security Products page, click the Manage button next to the SiteLock® product you want to set up.
- To launch SiteLock®, click on the MANAGE SITELOCK button.
You have now accessed SiteLock. You will see a Configuration Alert for SMART and TrueShield. For steps to configure SMART and TrueShield, please see SMART Setup and Trueshield Setup below.
SMART downloads a copy of your website to find and clean malware. If it finds malicious code on your website, it removes the code from your file and replaces it with clean files.
-
In your SiteLock Dashboard, click the Configure button beside SMART. You also have the option to configure SMART by going to Settings, then selecting Download Settings.
-
The screen may show two options, as shown in the image below. Select “I want to provide this data myself manually.” If these options do not show, proceed to step 3.
-
Fill out the following fields:
- Method for File Transfers – select FTP, SFTP, or FTPS from the drop-down, depending on what your website is using.
- If your domain is associated with our Web Hosting products, select FTP.
- If your domain is associated with WordPress, select SFTP.
- If your domain is hosted by a third-party Registrar, select FTPS if your website is using FTPS.
- FTP Host of IP Address – Enter your Host Address or IP Address. You can find your Host Address in your:
- FTP Account Manager within your Hosting Control Panel, or
- SFTP Account Manager within your WordPress Control Panel.
- You also have the option to use the IP address of your website. For more information on finding your IP address, please see How Do I Manage DNS and Advanced DNS Records?
- FTP Account Manager within your Hosting Control Panel, or
- (S)FTP Port Number – Enter port 21 for FTP and FTPS or port 22 for SFTP.
- Root Directory field – Enter your File Path, which you can find in your FTP or SFTP Account Manager.
- USER ID – Enter your FTP username. Do not add a space before or after your username. SMART will not recognize usernames with % symbols or spaces.
- Password – Enter the FTP password. Do not add a space before or after your username. SMART will not recognize usernames with spaces.
- Speed for FTP file downloads – Select how many connections you want SMART to scan files.
- Maximum Download Time – Select how long you want SMART to scan files before it stops for the next day or cycle.
- Once you have filled out the necessary fields, click Save. You will see a green banner that confirms your changes have been saved.
- Next, go to SMART Settings.
- Select “Yes, automatically remove the malware found” from the drop-down, then click Save.
You have successfully configured SMART! It will now remove malware detected automatically.
You can find your SMART scan results by going to your Dashboard and clicking the View Details button under SMART.
TrueShield protects your website from common cyberattacks, such as Cross-Site Scripting and SQL Injection.
- In your SiteLock Dashboard, click the Configure button beside TrueShield. You also have the option to click the Configure button under TrueShield to set it up.
- On the Trueshield/Truespeed Activation page, you will see Step 1 Manage SSL.
Note: If you see “Not Necessary at this time,” it means you do not have an SSL Certificate for your website. An SSL Certificate is needed to set up TrueShield.
- Click the Validating Domain Ownership drop-down.
- If your domain is hosted by Network Solutions®, check your DNS Manager to see if the TXT Value shown in SiteLock is added to your Advanced DNS Records. For instructions on checking or updating your TXT Record, please see How Do I Manage DNS and Advanced DNS Records?
- If the TXT record is not added, it will say, “Site DNS returned no matching TXT record was found” in SiteLock. In that case, you must add the TXT record provided by SiteLock in your Advanced DNS Records. Once added, please allow 24 hours for DNS changes to propagate throughout the web.
- If your domain is hosted by another provider, contact your provider to get the TXT record you need for SSL Validation, and refer to this article Add TXT Record for SSL Validation for instructions.
- After validating your domain, click the Manage Certificate drop-down.
- Click the Upload Certificate button to upload your SSL Certificate and add it to your TrueShield service. Doing so will allow SSL traffic to route through TrueShield.
Note: If you purchased your SSL Certificate from another provider, please contact them to get the files you need to upload the certificate in SiteLock.
- Click the SSL Traffic Flow drop-down to confirm whether your SSL is routing through TrueShield or not. For example:
- Next, click Step 2 Manage Routing to see the records you must have in your Advanced DNS Records to route your traffic through SiteLock’s CDN.
- If your domain is hosted by Network Solutions®, check your DNS Manager to see if the A records and CNAME record shown in SiteLock are added to your Advanced DNS Records. For instructions on checking or updating your DNS records, please see How Do I Manage DNS and Advanced DNS Records?
- If the A records and CNAME record are not added, you must add them to your Advanced DNS Records. Once added, please allow 24 hours for DNS changes to propagate throughout the web.
- If your domain is hosted by another provider, click here for instructions.
- Click Step 3 Install SiteLock Trust Seal. This step is optional. For steps on how to install your Trust Seal, please see Installing Trust Seal below.
Once you have successfully set up the Firewall, you can check your results by clicking the View Details button under TrueShield.
Trust Seal shows site visitors that your website is safe and secure to visit and input their information. After you are done with Steps 1 and 2 in setting up TrueShield, you can proceed with installing your Trust Seal.
- Click the BEGIN TRUST SEAL INSTALLATION link in Step 3 of setting up TrueShield.
You can also start setting up Trust Seal from the SiteLock dashboard by clicking the Trust Seal badge in the Domain Statistics section.
On the next page, you will see 3 steps:
- Step 1: Choose a language - Select the language you want your Trust Seal to display by clicking the drop-down menu. Once you have selected a language, click the Next button to proceed to Step 2.
- Step 2: Choose a color, size, and style - The options you choose will update the Trust Seal badge example on the right. Click the Next button to proceed to Step 3.
- Step 3: Install SiteLock Trust Seal – Copy the code and insert it into your website. Please select from the options below for steps on inserting a code into your website:
-
After you have added the code into your website, click the Save Configuration Settings button.
Please allow 24 hours for your Trust Seal to appear on your website.
SSL scan ensures that your website has an active and functioning SSL certificate installed.
- In your SiteLock Dashboard, click the Configure button under SSL Scan.
- Enter the domain name that should be on your SSL Certificate in the Host Name field.
- Click the Submit button.
- On your Dashboard, the SSL Scan tile will now show as Pending.
If the SSL certificate is valid, then the scan will successfully be configured. The status on the SSL Scan icon changes from Configure to Good.
Please allow 24 hours for SSL Scan to configure.
Review
Congratulations! You've successfully learned how to set up SiteLock, adding strong protection to your website. Remember, online security is an ongoing effort. Stay vigilant, keep your SiteLock settings updated, and focus on creating exceptional online experiences without the worry of cyber threats.