Getting Started with SiteLock

Want to learn how to set up SiteLock and fortify your website's defenses? You're in the right place! SiteLock is a site security service that runs daily scans to identify vulnerabilities, works to remove any identified harmful content, and helps safeguard your websites from possible threats like malware, bots, denial of service attacks, blacklisting, etc. This comprehensive guide will walk you through the entire process, ensuring your site remains shielded from any digital dangers.

After purchasing SiteLock service, you will notice Items in Process on your Account Manager home page. As soon as the service is ready to be set up, the status will change to Ready to Setup. Once you see this status, you can refer to the instructions provided in this article to help you set up your newly purchased service.

Select an option to learn more.

• How to Setup SiteLock
• SMART Setup
• TrueShield Setup
• Trust Seal Badge

How to Setup SiteLock

Below are the steps to set up your SiteLock service.

1. Log in to your Account via https://www.web.com/my-account/login.
2. Click Security on the left side of the page.
   


3. Click the vertical ellipsis next to the SiteLock product you want to manage, then click the Manage button from the options provided.
   


4. You will see a Configuration Alert for SMART and TrueShield. To configure SMART and TrueShield, follow the setup wizard for both items.
   

SMART Setup

SMART downloads a copy of your website to find and clean malware. If it finds malicious code on your website, it removes the code from your file and replaces it with clean files. Follow the instructions below for SMART Setup.

1. Click the Configure button beside SMART in the SiteLock dashboard. You also have the option to configure SMART by going to Settings and then selecting Download Settings.
   


2. The screen may show two options, as shown in the image below. Select I want to provide this data myself manually. If these options do not show, proceed to step 3.
   


3. Fill out the following fields:
   
   1. Method for File Transfers – Select SFTP or FTPS from the drop-down, depending on what your website is using.
      • If the domain is associated with our Web Hosting products, select SFTP.
      • If the domain is associated with WordPress, select SFTP.
      • If a third-party registrar hosts the domain, select FTPS if your website uses FTPS.
   2. FTP Host of IP Address – Enter the Host Address or IP Address.
      • Go into CSR-Tools, navigate to the product details page of the website associated with this product, and then click the magnifying glass under More Info. You will see a new window where you can locate this information.
   3. IP Address – Enter the IP Address
   4. SFTP/FTPS Port Number – Enter port 21 for FTPS or port 22 for SFTP.
   5. Root Directory field – Enter the file path ./htdocs
   6. USER ID – Enter the FTP username from CSR-Tools. Do not add a space before or after the username. SMART will not recognize usernames with % symbols or spaces.
   7. Password – Enter the FTP password. Do not add a space before or after the password. SMART will not recognize passwords with spaces.
   8. Speed for FTP file downloads – Select a speed for FTP file downloads. Normal is recommended.
   9. Maximum Download Time – Select Maximum Download Time. 60 min/day is recommended.


4. Once you have filled out the necessary fields, click Save. You will see a green banner that confirms your changes have been saved.
5. Next, go to SMART Settings.
   


6. Select Yes, automatically remove the malware found from the drop-down, then click Save.
   

You have successfully configured SMART! It will now remove malware detected automatically.

You can find your SMART scan results by going to the Dashboard and clicking the View Details button under SMART.

TrueShield Setup

The certificate is automatically installed if you have an SSL certificate associated with your Web.com-hosted account. The TrueShield icon appears with a green checkmark. If you see the yellow exclamation point, you must follow the steps below to set up TrueShield.

1. Click the Configure button beside TrueShield in the SiteLock Dashboard.
   


2. On the Trueshield/Truespeed Activation page, you will see Step 1 Manage SSL.
   Note: If you see Not Necessary at this time, it means you do not have an SSL Certificate for your website. An SSL Certificate is needed to set up TrueShield.
   


3. Click the Validating Domain Ownership drop-down.
4. If we host your domain, check the DNS to see if the TXT Value shown in SiteLock is added to your Advanced DNS Records.
5. If the TXT record is not added, it will say, Site DNS returned no matching TXT record was found in SiteLock. In that case, you must add the TXT record provided by SiteLock to your Advanced DNS Records. Once added, please allow 24 hours for DNS changes to propagate throughout the web.
6. If another provider hosts your domain, you must contact your provider to get the TXT record you need for SSL Validation, and refer to this article Add TXT Record for SSL Validation, for instructions.
7. After validating your domain, click the Manage Certificate drop-down.
   


8. Click the Upload Certificate button to upload your SSL Certificate and add it to your TrueShield service. Doing so will allow SSL traffic to route through TrueShield.
   Note: If you purchased an SSL Certificate from another provider, you must contact them to get the files you need to upload the certificate in SiteLock.
9. Click the SSL Traffic Flow drop-down to confirm whether your SSL is routing through TrueShield or not. For example:
   


10. Next, click Step 2 Manage Routing, to see the records that must be in your Advanced DNS Records to route your traffic through SiteLock's CDN.
    
    • If we host your domain, check if the A and CNAME records shown in SiteLock are added to your Advanced DNS Records.
    • If the A and CNAME records are not added, you must add them manually to your Advanced DNS Records. Once added, please allow 24 hours for DNS changes to propagate throughout the web.
    • If another provider hosts your domain, please refer to this article To Edit an A Record and CNAME, for instructions.


11. Click Step 3 Install SiteLock Trust Seal. This step is optional. For steps to install the Trust Seal, please refer to the Trust Seal Badge section below.

Once you have successfully set up the Firewall, you can check your results by clicking the View Details button under TrueShield.

Trust Seal Badge

Trust Seal shows site visitors that your website is safe and secure to visit and input their information.

1. Click the BEGIN TRUST SEAL INSTALLATION link in Step 3 of setting up TrueShield.
   
   You can also start setting up Trust Seal from the SiteLock dashboard by clicking the Trust Seal badge in the Domain Statistics section.
   


2. On the next page, select the language you want the Trust Seal to display by clicking the drop-down menu and then click the Next button to proceed to Step 2.
   


3. Click the drop-down arrows and select the appropriate values for these options—Color, Size, and Style. Click Next to proceed to Step 3.
   


4. Copy the code and insert it into your website. Please select from the options below for steps on inserting a code into your website:
   • Website Builder or Online Store
   • WordPress
   
   


5. After adding the code to your website, click the Save Configuration Settings button.

The Trust Seal will take up to 24 hours to appear on your website.

Review

Congratulations! You've successfully learned how to set up SiteLock, adding strong protection to your website. Remember, online security is an ongoing effort. Stay vigilant, keep your SiteLock settings updated, and focus on creating exceptional online experiences without the worry of cyber threats.