Restricted URLs and security for Production Site

[Yannis Sinadinos, modificado 6 Anos atrás.]

Hello,

I am deploying my first liferay site in production and I would like a few suggestions about security.

I discoverd the jsonws and webDAV are enabled by default. So I disabled both from portal-ext. properties.

I also set up the firewall for visitors to access only /web/mysite*

Are there any other tips for better security?

[Samuel Kong, modificado 6 Anos atrás.]

I recommend checking out Olaf's blog series, Securing Liferay