Liferay Portal Enterprise Edition (EE) & CE

[biji biji, geändert vor 14 Jahren.]

Dear all,

http://www.liferay.com/products/liferay-portal/ee/overview

its mentioned "Liferay Portal EE implements the Top 10 recommended best practices published by the OWASP organization."

Does this mean Liferay Portal CE doesnt implement OWASP recommendations.

Am i correct, EE=CE+Service ?


Regards
biji

[Sean Hannam, geändert vor 12 Jahren.]

This is a good question. I am about to implement Liferay Portal CE as our organization intranet, and it would certainly help if I could tell the security guys that it follows OWASP recommendations.

[David H Nebinger, geändert vor 12 Jahren.]

biji biji:

Am i correct, EE=CE+Service ?

No, you're not correct. EE includes functionality not implemented or shared with CE. CE is meant to be a springboard, where you can try it out and even build/deploy your own portlets to see how it will all work. But CE typically will not have all of the patches included in EE (especially security-related patches), and the patch cycles don't match up.

If you're going to be doing an intranet portal, CE would work just fine. But if you're going to do an extranet or internet portal, you'd be wise to step up to EE.