Adobe® ColdFusion® 10 Server Lockdown Guide

More documents

Recommendations

Info

Choose a strong password and unique username for the ColdFusion administrator. Strong passwords should contain a random mix of case, numbers, special characters and at least 8 characters in length. 39
Page 1 and 2: Adobe ColdFusion 10 Server Lockdown
Page 3 and 4: Section 2: Installation Prerequisit
Page 6 and 7: Next create a new user for the IIS
Page 8 and 9: In the Advanced Security Settings D
Page 10 and 11: User / Group Permissions cfusion (Y
Page 12 and 13: Next Click Add Roles, and select th
Page 14 and 15: Review the list of Role Services an
Page 16 and 17: Under Process Model change the Iden
Page 18 and 19: URI Purpose Safe to Block /CFIDE/ad
Page 20 and 21: CFIDE/ServerManager Contains the AI
Page 22 and 23: Table 2.2.8.1 : CFIDE URIs Addition
Page 24 and 25: Next click on Sites and Add Web Sit
Page 27 and 28: 2.3 Prerequisites for a RedHat Ente
Page 29 and 30: Create a user for ColdFusion to run
Page 31 and 32: SSLRequireSSL The above requires t
Page 34 and 35: Do not install ColdFusion 10 ODBC S
Page 36 and 37: Select an install directory, a non-
Page 40 and 41: You may consider checking the check
Page 42 and 43: The IIS Application Pool user (iiss
Page 44 and 45: If you installed any optional subco
Page 46 and 47: 4.1.6 Update Java Virtual Machine T
Page 48 and 49: 4.1.9 Handler Mapping Settings Doub
Page 50 and 51: You may consider using chmod -R 550
Page 52 and 53: We must also apply the proper SELin
Page 54 and 55: 4.2.8 Add umask to startup script E
Page 56 and 57: Please note: Changing the port sett
Page 58 and 59: Setting Default Recommendation Desc
Page 70 and 71: 5.10 Debugging & Logging > Logging
Page 72 and 73: 5.13 Security > RDS Setting Default
Page 76 and 77: In addition some servlets may depen
Page 78 and 79: MessageBrokerServlet /flex2gateway/
Page 80 and 81: CFFileServlet /CFFileServlet/* 6.1
Page 82 and 83: 6.11 Adding ClickJacking Protection
Page 84 and 85: Appendix A: Sources of Information
Page 86 and 87: RDS Remote Development Services XSS

Adobe® ColdFusion® 10 Server Lockdown Guide

Create successful ePaper yourself

Delete template?

Save as template?