Security Center for Perfex CRM – Firewall, Threat Detection & Live Traffic Monitoring

Security Center is a native security and HTTP traffic monitoring module for Perfex CRM. It helps administrators monitor incoming requests, detect suspicious activity, control access and investigate performance issues from a single dashboard.

The module works directly inside Perfex CRM without modifying core files. It combines live traffic visibility, automated threat detection, firewall controls, rate limiting and detailed request logs in a performance-conscious architecture.

Key Features

Live HTTP Traffic Monitoring

Monitor GET, POST and AJAX requests with IP address, country, HTTP method, requested URL, status code and response time.

Staff and Customer Identification

See which authenticated staff member or customer generated a request and quickly open the related profile.

Threat Detection Engine

Detect common attack patterns including SQL injection, command injection, XSS, directory traversal, local/remote file inclusion and sensitive-file scanning attempts.

Automatic Threat Blocking

Automatically block IP addresses after a configurable number of suspicious requests within a defined period.

IP and CIDR Firewall Rules

Manually block individual IP addresses or complete CIDR network ranges.

Country-Based Access Restrictions

Restrict traffic from selected countries using cached country information.

IP Whitelist

Trusted IP addresses can bypass country restrictions, automatic blocks and request rate limits.

Request Rate Limiting

Protect Perfex CRM against excessive requests, automated tools and abusive AJAX traffic.

Response-Time Monitoring

Identify slow pages, reports and AJAX operations. A request taking two minutes, for example, is displayed as approximately 120,000 ms.

HTTP Status Explanations

Understand common response codes such as 200, 303, 307, 404, 429 and 500 with clear descriptions.

URL Logging Exclusions

Exclude trusted high-frequency URLs from routine traffic logs while continuing to record suspicious, blocked, fatal and 5xx requests.

Attack Log Management

Review detected attacks separately and manage stored security records using dedicated permissions.

Automatic Log Retention

Perfex cron removes expired logs in controlled batches to prevent unlimited database growth.

Performance-Friendly Caching

Firewall rules and module settings are cached to reduce repeated database queries.

Privacy-Conscious Logging

Sensitive query parameters such as passwords, tokens, API keys and authorization values are automatically redacted.

Granular Staff Permissions

Assign separate permissions for the dashboard, Live Traffic, attack logs, firewall rules, settings and log deletion.

No Additional Package Installation

No Composer package or paid API key is required.

Compatibility

• Perfex CRM 3.1 or later
• PHP 8.1
• MySQL 8
• CodeIgniter 3
• Modern web browsers

Important Notice

Security Center adds an additional monitoring and protection layer to Perfex CRM. It does not replace secure server configuration, regular backups, HTTPS, hosting-level firewall protection or professional security audits.

This is an add-on module and requires an existing Perfex CRM installation.