How can I protect my public facing application?
When deploying public facing applications, several steps can be taken to further protect your applications from nefarious activity. While m-Power supports multiple levels of enhanced security, these features are not enabled by default as doing so would hinder development efforts.
How to secure a public facing web server?
Enable multi-factor authentication everywhere that is public facing such as your Amazon/Digital Ocean/etc. account, your credentials to the server, etc. Change the root password to minimum 16 characters, alphanumeric with special characters. What else? Marcus Müller has a point, this is a very broad question.
What are best practices to protect Internet facing web?
Along with the bundled OWASP ModSecurity Core Rule Set (CRS), it offers essential protections against application layer attacks and information leakages. Make sure that clients can’t directly send requests to your server (from a TCP point of view), that could facilitate attacks otherwise.
Are there security risks for Internet facing websites?
Nowadays, internet facing web servers are exposed to high security risks. We quite commonly see web servers being hacked (eg: malicious code being injected in website content), and then clients that are browsing the website are most likely to be transparently compromised (aka drive-by download).
How to prevent CSRF in public facing applications?
One way to prevent this is to pass unique tokens with each Maintainer’s request to ensure the user is the one willingly making the requests. In your maintenance application, open the Application properties. Find the enable_csrf_prevention property under the Program Options tab and set it to ‘Yes’. Click Accept to save the changes.
Do you need a firewall for customer facing applications?
For example, internal applications may not need the same level of security as customer facing applications because they are only accessed by internal employees, from behind your firewall. Below are numerous techniques that could be implemented to further protect your data: