Adobe® ColdFusion® 10 Server Lockdown Guide

CFIDE/multiservermonitoraccess-policy.xml
Used to set a policy for
allowing viewing the server
monitor from multiple
domains.
/CFIDE/orm Contains interfaces used with
ORM. These interfaces do
not need to be accessible
through the web server.
/CFIDE/portlets Contains API for building
portlets with JSR-286, JSR-
168 or WSRP. The API does
not need to be accessible
through the web server.
/CFIDE/probe.cfm You can configure probes in
the ColdFusion administrator
which are used to monitor a
URL for failures. This will
throw an exception if not run
over 127.0.0.1.
/CFIDE/scheduler Contains an interface for
scheduled task event
handlers. Does not need to
be accessible through the
web server.
/CFIDE/scripts Contains javascript and other
assets for several ColdFusion
features cfform, cfchart, ajax
tags, etc.
Yes - the server monitor now runs on its
own web server on port 5500.
Yes
Yes
Yes, however if you want to use probes
you should create a web site that only
listens on 127.0.0.1 and remove this
block.
Yes
Yes - we will create a new, non default
URI for this folder, and specify the new
URI in the ColdFusion administrator.
19