Skip to main content
Sitecore

Return to Question

Corrected spelling and added question mark to make this a question
Source Link
Jason St-Cyr
Jason St-Cyr
  • 6.8k
  • 1
  • 19
  • 46

Secruity Security Hardening in PAASPaaS

We are using Sitecore 9.0.2 deployed in PAASPaaS as a general recommendation from Sitecore Security Hardening Guide prospectiveperspective we are supposesupposed to do the below items:

1)Prevent Anonymous Users access to admin folders

  1. IIS should not serve requests to .config's

My Thought is these two above mentioned Security hardening things should be done by default on the PaasPaaS for CD since we are using Sitecore ARM Templates and CM's should still allow above two points.

So no further action is required from our side .?

Secruity Hardening in PAAS

We are using Sitecore 9.0.2 deployed in PAAS as a general recommendation from Sitecore Security Hardening Guide prospective we are suppose to do the below items

1)Prevent Anonymous Users access to admin folders

  1. IIS should not serve requests to .config's

My Thought is these two above mentioned Security hardening things should be done by default on the Paas for CD since we are using Sitecore ARM Templates and CM's should still allow above two points.

So no further action is required from our side .

Security Hardening in PaaS

We are using Sitecore 9.0.2 deployed in PaaS as a general recommendation from Sitecore Security Hardening Guide perspective we are supposed to do the below items:

1)Prevent Anonymous Users access to admin folders

  1. IIS should not serve requests to .config's

My Thought is these two above mentioned Security hardening things should be done by default on the PaaS for CD since we are using Sitecore ARM Templates and CM's should still allow above two points.

So no further action is required from our side?

Source Link
Alivor Tikos
Alivor Tikos
  • 393
  • 1
  • 15

Secruity Hardening in PAAS

We are using Sitecore 9.0.2 deployed in PAAS as a general recommendation from Sitecore Security Hardening Guide prospective we are suppose to do the below items

1)Prevent Anonymous Users access to admin folders

  1. IIS should not serve requests to .config's

My Thought is these two above mentioned Security hardening things should be done by default on the Paas for CD since we are using Sitecore ARM Templates and CM's should still allow above two points.

So no further action is required from our side .