search : server auto-lockdown

Server Auto-Lockdown

Comment on Server Auto-Lockdown by Charlie Arehart

Comment on Server Auto-Lockdown by Carl Meyer

Adobe ColdFusion Security Best Practices (Server Auto-Lockdown)

Comment on Server Auto-Lockdown by RAHUL UPADHYAY

Comment on Server Auto-Lockdown by Saurav Ghosh

Comment on Server Auto-Lockdown by Saurav Ghosh

Comment on Apply the Server Auto-Lockdown to a site without re-installing the Lockdown tool by SauravGhosh

Comment on Server Auto-Lockdown by Michael Brown

Comment on Server Auto-Lockdown by Giancarlo Gomez

Comment on Server Auto-Lockdown by philg15796544

Comment on Server Auto-Lockdown by nickj24525839

Comment on Server Auto-Lockdown by Charlie Arehart

Comment on Server Auto-Lockdown by Miguel Fernandez

Comment on Server Auto-Lockdown by Charlie Arehart

Apply the Server Auto-Lockdown to a site without re-installing the Lockdown tool

Miguel Fernandez SauravGhosh – when you guys add security features like this in an update are you also updating the Server Auto-Lockdown installer to include them? (I realize this only applies to ColdFusion 2018)

Comment on Apply the Server Auto-Lockdown to a site without re-installing the Lockdown tool by Charlie Arehart

RAHUL UPADHYAY ColdFusion 2018 Add-on installers ColdFusion 2018 Add-on installers are available on https://www.adobe.com/support/coldfusion/downloads.html It includes installers for: COLDFUSION (2018 RELEASE) PERFORMANCE MONITORING TOOLSET COLDFUSION (2018 RELEASE) SERVER AUTO-LOCKDOWN COLDFUSION

. FWIW, if I need to lockdown a CF server, I use the CF2016 lockdown guide. (The 2018 version of the guide is written to presume you are using the auto lockdown tool. It has some new info, but it also lacks details that are presumed to be handled by the tool, but which ARE covered in the 2016 guide).

mattInVail Thanks again for the lockdown guide, but I need to point out that the auto lockdown tool is not an option for everyone. I manage CF on servers that require PIV card authentication, so just giving an admin password to the tool doesn't work. The sections that were removed are still

,Performance Monitoring Toolset,ColdFusion (2016 release) Update 8,ColdFusion (2018 release) Update 2,ColdFusion 11 Update 16,ColdFusion 11 updates,ColdFusion 2016 updates,ColdFusion 2018 updates,coldfusion builder updates,ColdFusion security updates,ColdFusion updates,Performance Monitoring Toolset updates,Server Auto-Lockdown

="nofollow">https://www.adobe.com/support/coldfusion/downloads.html As far as I can tell, the following installers were refreshed: Add-on Services Installers for ColdFusion (2018 release) ColdFusion (2018 release) .NET Integration Service Installer ColdFusion (2018 release) Performance Monitoring Toolset ColdFusion (2018 release) Server Auto-Lockdown

scalable, high-performing web applications in CFML. Now in ColdFusion, we’ve added an all-new Performance Monitoring Toolset, a standalone server with low overhead to control and optimize applications and a new auto lockdown installer to help increase security in the Production Server. In addition, web

?) The only way I could see a connection between CF and IIS of this sort (relating to CF somehow affecting IIS authentication) is if you had perhaps run the cf2018 auto lockdown tool. That does many things,  and though I'd not expect it to affect IIS auth, perhaps it does. Here again, are you saying

you mean Microsoft?)The only connection between CF and IIS of this sort that I can readily see (relating to CF somehow affecting IIS authentication) would be if you had run the new cf2018 auto lockdown tool. That does many things,  and though I’d not expect it to affect IIS auth, perhaps it does

technotes, it CAN'T be referring to the "auto lockdown tool", as that's only in CF2018. And therefore it must mean people who have "locked down a server themselves", perhaps implying "if you have followed all the steps in the lockdown guide". But second, not everyone DOES follow ALL the steps