Install Imunify360 on DirectAdmin, Plesk or a server without a panel

Imunify360 is a complete server security suite: an intelligent firewall, a web application firewall (WAF), malware scanning and automatic cleanup, Proactive Defense for PHP and patch management. The same installer works on DirectAdmin, Plesk and standalone servers; for cPanel see install Imunify360 on cPanel.

Before you start

• OS: AlmaLinux, Rocky or CloudLinux 8/9, or Ubuntu 20.04/22.04/24.04, 64-bit.
• Resources: at least 1 GB RAM free for Imunify360 (2 GB or more recommended).
• Licence: an Imunify360 key sized for the number of users, or an IP-based licence.
• A working DirectAdmin or Plesk installation (or no panel), and root SSH access.
• A backup, and a note of your own IP so you can whitelist it.

Prepare the server

1. Update the system and the panel.
2. Remove or disable conflicting firewalls. Imunify360 manages iptables itself and replaces CSF, firewalld rules for web ports and Fail2Ban. On DirectAdmin with CSF, Imunify360 can integrate, but a clean setup without CSF is simplest.
3. On Plesk, disable the Plesk Firewall extension rules that overlap, and ModSecurity rule sets other than the Imunify360 set after installation.

Install Imunify360

1. Download the deploy script:
   Copy

   wget https://repo.imunify360.cloudlinux.com/defence360/i360deploy.sh -O i360deploy.sh

2. Run it with your key:
   Copy

   bash i360deploy.sh --key YOUR-KEY

   For an IP-based licence, run bash i360deploy.sh without a key.
3. The script detects DirectAdmin or Plesk and installs the matching UI plugin. Installation takes 10 to 20 minutes.

On Plesk you can alternatively install Imunify360 from Extensions → Extensions Catalog and enter the key in the extension.

Open the interface

• DirectAdmin: Admin Level → Imunify360.
• Plesk: Extensions → Imunify360.
• No panel: use the CLI imunify360-agent, or install the standalone web UI as described in the Imunify360 documentation.

First settings

1. Firewall → White List: add your office or home IP.
2. Settings → Malware: enable real-time scanning, automatic cleanup and a scheduled full scan (weekly).
3. Proactive Defense: start in Log only mode for a week, then switch to Kill mode.
4. WAF: confirm the Imunify360 ModSecurity rule set is active.
5. Enable email notifications for infected files and blocked attacks.

Verify

imunify360-agent version
imunify360-agent rstatus

rstatus should report the licence as valid. Upload the harmless EICAR test string to a test site; it should be detected.

Troubleshooting

• Licence invalid: re-register with imunify360-agent register YOUR-KEY.
• You are blocked: from the server console run imunify360-agent whitelist ip add YOUR-IP.
• Conflicts with CSF or Fail2Ban: the installer warns about them; disable the other tool or follow the integration notes.

Next steps

• Convert to CloudLinux
• DirectAdmin Brute Force Monitor
• Plesk Security Advisor