Forum Discussion
AndOs
Cirrostratus
CirrostratusSecurity considerations for APM portal access
Security considerations for APM portal access
We are publishing an application through APM with a portal access for the first time.
With no ASM in front, are there any security aspects we ...
For security in Portal Access, we generally recommend against proxying the internet, so keep it to internal applications using the split settings in the rewrite profile, so that you're only rewriting your domain.
So:
Split, ACLs. Those are probably the two biggest concerns.
Split settings are not relevant to ACLs except that any non-bypass content should be allowed by ACLs.
ACLs control access once the user tries to request content, allow or deny.
Split-settings control what rewrite tells the user about where the content is, either local or remote.