We’re rewarding the question askers & reputations are being recalculated! Read more.

All Questions

Tagged with
Filter by
Sorted by
Tagged with
3
votes
1answer
120 views

Checklist for Sitecore Security Hardening using Azure PaaS

I am Using Sitecore version 9 on Azure PaaS, Is there any official Sitecore security hardening guide for Azure PaaS ?, I can see some documentation as below link - https://doc.sitecore.com/...
1
vote
1answer
203 views

Secure Azure SQL database connection using a managed identity

We are currently hosting our Sitecore 9.1 initial release on premises, but want to move the complete solution into Azure. We want to use public services and not put our solution in an ASE. To secure ...
1
vote
1answer
277 views

Sitecore Azure WebApp and TLS 1.2

I want to use the most secure TLS 1.2 on Sitecore Azure Web apps for all 4 roles - CD, CM, PRC and REP. I did not do any changes in Analytics processing and reporting - so, I do not deploy my code to ...
12
votes
2answers
2k views

WAF support with Sitecore Experience Platform

We are looking for a Web Application Firewall (WAF) solution for our Sitecore CMS implementation, because we are an Azure shop we specifically wanted to use the WAF feature on the Azure AppGateway ...
6
votes
2answers
420 views

How to obtain a certificate from a certified authority for Sitecore 9 Installation?

I am planning to deployed Sitecore 9 Update 1 on Azure PaaS using Sitecore Marketplace template. I have created the non-production environment like SIT,QA,UAT using self signed certificate option and ...
10
votes
3answers
589 views

SQL user creation is setting password of 12345, fails deployment

Using the updated Sitecore Azure Toolkit 2.0.1 rev. 171218, which has resources for 9.0.1, I'm hitting an error on the xc-collect\MSDeploy stage where it's attempting to apply the default sql user ...
4
votes
1answer
550 views

How to get connectionstrings for SQL and Redis from Azure Key Vault?

I am trying to understand if it is ever possible for Sitecore to load connection strings values from Azure Key Vault, not from web.config (or ConnectionStrings.config) file?
5
votes
2answers
268 views

CD security hardening patch/transform

We are hosting our sites in azure web apps and in process of applying security hardening. Wondering if anyone has already written a patch/transform file for below: 1. Deny anonymous users access to ...