Security Center – Firewall & Traffic Monitor for Perfex CRM

Note: This is a module for
Perfex CRM.
It is not a standalone application.

Live Demo

Username: [email protected]

Password: 1234

Bring real-time HTTP traffic visibility and practical application-level
protection to your Perfex CRM. Security Center helps administrators monitor
incoming requests, review suspicious activity, configure automatic limits,
and manage IP, CIDR, whitelist, and country access rules from one organized
admin panel.

Monitor requests, understand unusual activity, and manage access without
searching through raw server logs.

Performance-focused architecture:
Static assets are skipped by default, firewall data uses short-lived caches,
country information is resolved in bounded cached batches, and old logs can
be removed automatically by the standard Perfex cron.

Key Features

• Security Dashboard: Review total requests, suspicious
  requests, unique IP addresses, average response time, hourly traffic,
  HTTP status distribution, top IPs, and top countries for the last 24 hours.
• Live Traffic Monitor: Inspect request time, IP address,
  country, method, URL, AJAX state, HTTP status, response time, risk level,
  matched rule, authenticated staff member, and customer information.
• Automatic Refresh: Keep the Live Traffic table updated
  automatically without manually refreshing the page.
• Direct Page Links: Open normal application pages from
  Live Traffic. Links are intentionally hidden for AJAX requests.
• Advanced Traffic Filters: Filter by date range, IP,
  country, HTTP status, URL, staff member, risk level, and matched rule.
• Suspicious Request Logs: Review requests that matched a
  security signature or were rejected by an active firewall rule.
• Automatic Suspicious-IP Blocking: Configure how many
  suspicious requests are allowed within the detection window and how long
  an automatic block remains active.
• Request Rate Limiting: Set the maximum number of requests
  permitted per IP within a configurable time window.
• IP & CIDR Firewall: Add manual IPv4, IPv6, and CIDR
  blocks with reasons and optional expiration dates.
• IP Whitelist: Allow trusted addresses and networks to
  bypass country restrictions, rate limits, and automatic blocks.
• Country-Based Access Rules: Restrict selected countries
  after the visitor’s public IP country has been resolved and cached.
• Lockout Protection: Prevent administrators from saving
  an IP or CIDR rule that blocks the address/network used by their current request.
• HTTP Status Code Guide: Built-in explanations make codes
  such as 200, 303, 307, 403, 429, and 500 easier to understand.
• URL Logging Exclusions: Exclude exact application paths
  from routine logging. Suspicious, blocked, fatal, and HTTP 5xx requests
  remain available for review.
• Staff Logging Exclusions: Choose staff members whose
  authenticated activity should not appear in Live Traffic while firewall
  and threat checks remain active.
• Automatic Data Retention: Choose how many days records
  are retained and let Perfex cron remove expired rows in bounded batches.
• Granular Staff Permissions: Assign Dashboard, Live
  Traffic, Attack Logs, Firewall, Settings, and log deletion permissions separately.

Built for Daily Perfex CRM Use

• Uses the standard Perfex module installation and activation flow.
• Request logging can be disabled without disabling firewall protection.
• Static CSS, JavaScript, image, and font requests are skipped by default.
• AJAX requests are clearly identified.
• Known country results are cached and reused.
• Firewall settings use cache to avoid a database query on every request.
• Existing traffic records can be filtered and exported using the Perfex table tools.
• All configurable limits are validated server-side.

Slow Requests and Large Reports

Security Center does not block a legitimate report simply because it takes a
long time to finish. When the request completes, its response time is recorded
in Live Traffic. Blocking decisions are based on firewall, threat, country,
whitelist, and rate-limit rules—not response duration alone.

Simple Installation

1. Download and extract the CodeCanyon package.
2. Open Setup > Modules in Perfex CRM.
3. Upload the included security_center.zip file.
4. Click Activate.

No Composer command, Node.js build, GeoIP database, or separate installation
wizard is required.

Requirements

• Perfex CRM 3.1 or newer
• PHP 8.1 or newer
• MySQL 8.x
• A working Perfex cron job for scheduled cleanup and country enrichment

External Connection & Privacy

Public IP addresses without cached country data may be sent in bounded batches
to the country.is country-resolution service. Security Center does not send CRM
invoices, customer profiles, emails, or uploaded business documents to this service.

Important Scope

Security Center is an application-level monitoring and access-control module
for Perfex CRM. It complements, but does not replace, secure hosting, software
updates, backups, a network firewall, a CDN/WAF, malware scanning, or
professional server administration.

Change Log

Version 1.0.0 / Initial release