Adobe® ColdFusion® 10 Server Lockdown Guide

More documents

Recommendations

Info

Create Dedicated User Accounts Ensure that all partitions use NTFS to allow for fine grained access control. Setup a dedicated website for CF administrator 2.2.1 Create Dedicated User Accounts Create a new User for the ColdFusion Service to Run As, in the screenshot below we call this user cfusion, choose a unique username that may not be easily guessed. Create ColdFusion Service User Account 4
Page 1 and 2: Adobe ColdFusion 10 Server Lockdown
Page 3: Section 2: Installation Prerequisit
Page 7 and 8: 2.2.2 Create Web Root Directory Cre
Page 9 and 10: Table 2.2.3.1 Web Root Content Secu
Page 11 and 12: 2.2.4 Add / Remove IIS Server Roles
Page 13 and 14: The IIS role includes a number of o
Page 15 and 16: 2.2.5 Delete Default IIS Web Site A
Page 17 and 18: Remove any Application Pools that a
Page 19 and 20: CFIDE/multiservermonitoraccess-poli
Page 21 and 22: Our strategy here is to block all U
Page 23 and 24: URI Purpose Safe to Block /cffilese
Page 25: Select Require SSL and Require 128-
Page 28 and 29: If Apache (httpd) was already insta
Page 30 and 31: Deny from all Allow from 127.0.0.1
Page 32: If you receive a 403 Forbidden resp
Page 35 and 36: Enable the Secure Profile, and spec
Page 37: Install the connector for IIS, you
Page 40 and 41: You may consider checking the check
Page 42 and 43: The IIS Application Pool user (iiss
Page 44 and 45: If you installed any optional subco
Page 46 and 47: 4.1.6 Update Java Virtual Machine T
Page 48 and 49: 4.1.9 Handler Mapping Settings Doub
Page 50 and 51: You may consider using chmod -R 550
Page 52 and 53: We must also apply the proper SELin
Page 54 and 55:
4.2.8 Add umask to startup script E
Page 56 and 57:
Please note: Changing the port sett
Page 58 and 59:
Setting Default Recommendation Desc
Page 60 and 61:
Page 62 and 63:
Page 64 and 65:
Page 66 and 67:
Page 68 and 69:
Page 70 and 71:
5.10 Debugging & Logging > Logging
Page 72 and 73:
5.13 Security > RDS Setting Default
Page 74 and 75:
Page 76 and 77:
In addition some servlets may depen
Page 78 and 79:
MessageBrokerServlet /flex2gateway/
Page 80 and 81:
CFFileServlet /CFFileServlet/* 6.1
Page 82 and 83:
6.11 Adding ClickJacking Protection
Page 84 and 85:
Appendix A: Sources of Information
Page 86 and 87:
RDS Remote Development Services XSS
show all

Adobe® ColdFusion® 10 Server Lockdown Guide

Create successful ePaper yourself

Delete template?

Save as template?