On a single server setup for Sitecore which has a CDN in front of it how would you go about securing the Sitecore client.

If there was no CDN I would implement IP security to block access to the relevant folders under Sitecore as per


However with a CDN the IP address reaching the server will always be the CDN's rather than the end users.

2 Answers 2


You can setup CDN normal way, but block access to the /sitecore on the CDN level. Then add subdomain like cms.example.com that points to the same server but without CDN. And you can setup ip restrictions for /sitecore


CDN is implemented for CD instances only and not CM. So there is no link between securing CM instance with CDN. With regards to securing CM instances, you can follow this link for more clarity: Sitecore Security Guide

  • Sumit this is a single server setup where CM and CD is on one single server. Oct 9, 2019 at 8:01

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.