IBM® API Connect V12 Reserved

Managing CMS Portal security

You can manage multiple security elements in the CMS Portal.

Configuring CAPTCHA
You can add a CAPTCHA challenge to any of your CMS Portal pages to protect your site from spam.
Configuring reCAPTCHA
You can configure reCAPTCHA on your CMS Portal site to provide more protection from spam and abuse.
Configuring session timeout and limit
You can specify session timeout settings to control when a user is automatically logged out of the CMS Portal. You can also restrict the number of sessions a single user has available to them.
Configuring the timeout length for the password reset link
You can configure the timeout length for the one-time password reset link that is sent from the CMS Portal to the admin user account.
Configuring your site password policy
You can configure your site password policy to define the constraints that are applied to the passwords of your CMS Portal users.
Disabling CORS warnings
You can disable cross-origin resource sharing (CORS) warnings for unenforced APIs in the CMS Portal.
Disabling live testing of APIs
You can disable live testing of APIs in the CMS Portal to restrict exposure of an API.
How to enable penetration testing, and information about CMS Portal cookies
Many security features are available in the CMS Portal, but if you need to do a penetration test of your CMS Portal site, some of these features might block the scan that is required as part of the testing. This topic provides guidance on the security features that you might need to disable to allow penetration testing of your site, as well as information about CMS Portal cookies.
Using flood control for login security
You can configure login security for your CMS Portal by using flood control.
Login security
You can configure the login security for your CMS Portal at an IP and user level. You can also configure login security for CMS Portal contact forms.
Using the Security kit
You can improve the security of your website by configuring various options that are available in the Security Kit module, in the CMS Portal.
Using Honeypot for spam protection
Honeypot protection provides security mechanisms to protect your CMS Portal site from form submission by spam bots. If spam bot activity is detected, form submission is blocked.

Parent topic: Configuration