9.8. Network Security
9.8.1. Secure the Management Interfaces
Summary
In a test environment, it is typical to run JBoss Enterprise Application Platform 6 with no security layer on the management interfaces, comprised of the Management Console, Management CLI, and any other API implementation. This allows for rapid development and configuration changes.
In addition, the a silent authentication mode is present by default, allowing a local client on the host machine to connect to the Management CLI without requiring a username or password. This behaviour is a convenience for local users and Management CLI scripts, but it can be disabled if required. The procedure is described in the topic Section 9.7.6, “Remove Silent Authentication from the Default Security Realm”.
When you begin testing and preparing your environment to move to production, it is vitally important to secure the management interfaces by at least the following methods: