Security Issues; Installing F-Secure Policy Manager In High Security Environments - F-SECURE POLICY MANAGER 8.0 Administrator's Manual

28
3.2

Security Issues

3.2.1 Installing F-Secure Policy Manager in High Security
Environments
F-Secure Policy Manager Server utilizes Apache Web Server technology,
and even though we do the utmost to deliver a secure and up-to-date
technology we advise you to regularly consult the following sites from
information on Apache technology and security.
The most up to date information on security issues related to Operating
Systems and Apache web server can be found at the CERT web site:
http://www.cert.org.
A document containing advice on how to secure an installation of the
Apache web server is available at
security_tips.html. and a list of vulnerabilities at
http://www.apacheweek.com/features/security-13.
The release notes contain important information about installation
and security. Read these notes carefully!
F-Secure Policy Manager is designed to be used in internal corporate
networks mainly for managing F-Secure Anti-Virus products. F-Secure
does not recommend using F-Secure Policy Manager over public
networks such as Internet.
IMPORTANT: When installing F-Secure Policy Manager in high
security environments, you should make sure that the
Administration port (by default port 8080) and the Host port (by
default port 80) are not visible in the Internet.
http://www.apache.org/docs/misc/