9.8. Network Security

9.8.1. Secure the Management Interfaces

Summary

In a test environment, it is typical to run JBoss Enterprise Application Platform 6 with no security layer on the management interfaces, comprised of the Management Console, Management CLI, and any other API implementation. This allows for rapid development and configuration changes.

In addition, the a silent authentication mode is present by default, allowing a local client on the host machine to connect to the Management CLI without requiring a username or password. This behaviour is a convenience for local users and Management CLI scripts, but it can be disabled if required. The procedure is described in the topic Section 9.7.6, “Remove Silent Authentication from the Default Security Realm”.

When you begin testing and preparing your environment to move to production, it is vitally important to secure the management interfaces by at least the following methods:

Section 9.8.2, “Specify Which Network Interface the JBoss Enterprise Application Platform Uses”
Section 9.8.3, “Configure Network Firewalls to Work with JBoss Enterprise Application Platform 6”

Report a bug

Select Your Language

Infrastructure and Management

Cloud Computing

Storage

Runtimes

Integration and Automation

9.8. Network Security

9.8.1. Secure the Management Interfaces