Forum Discussion
ErkkiS_295148
Cirrus
Cirrusxml signatures
I am trying to create a simple policy for web services/xml which would scan the incoming traffic against generic and xml related violations (without format or schema checks).
After creating + as...
nathe
Cirrocumulus
CirrocumulusErkkiS,
The way you have created the policy, it will only be a negative security policy, i.e. it will check for signature violations. What you won't get is any protection against XML RFC/Standards e.g. the format of the request. You would be better served by creating a policy based on the Web Services wizard and add your XSD/WSDL file to ensure proper XML validation checking.
Hope this helps,
N
