Best Practices Domino Security - Nash!

Web-Security
"Anonymous"" matches before "-Default-"
-Default-"
Maximum Internet Access limits access via Web
regardless of ACL level
Have file and directory protection config for webservers
Insecure requests can be blocked via redirects
Example: /default.ida* , */system32/*
Out of the box there is no way to limit the number of
retries for HTTP password requests
Use tools like SecureDomino from TIMETOACT
(http://www.securedomino.com)
Re-create SSO document regularly