Adobe® ColdFusion® 10 Server Lockdown Guide
Adobe® ColdFusion® 10 Server Lockdown Guide
Adobe® ColdFusion® 10 Server Lockdown Guide
You also want an ePaper? Increase the reach of your titles
YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.
Setting Default Recommendation Description<br />
Query<br />
Timeout<br />
(seconds)<br />
0 (no timeout) Specified Specify an upper limit to mitigate<br />
DOS attacks.<br />
Allowed SQL SELECT,<br />
INSERT,<br />
UPDATE ,<br />
DELETE,<br />
CREATE, DROP,<br />
ALTER, GRANT,<br />
REVOKE, Stored<br />
Procedures<br />
5.7 Data & Services > Flex Integration<br />
Enable only what<br />
your application<br />
requires.<br />
Setting Default Recommendation Description<br />
Enable Flash<br />
Remoting<br />
support<br />
Enable RMI<br />
over SSL for<br />
Data<br />
Management<br />
Checked Unchecked if not<br />
used.<br />
Unchecked Checked if using<br />
LiveCycle Data<br />
Services ES<br />
The CREATE, DROP, ALTER,<br />
GRANT, and REVOKE operations<br />
are not commonly used in web<br />
applications.<br />
Ensure that the database user that<br />
ColdFusion connects as, also has<br />
limited permissions to only what is<br />
necessary.<br />
Disable Flash Remoting if it is not<br />
being used.<br />
Enable and specify a keystore and<br />
password if using LiveCycle Data<br />
Services ES with Flex.<br />
68
Change language