Security Considerations

User should evaluate security consideration as per their enterprise policy and should take necessary steps to harden it.
  • It is recommended that Connect:Direct Web Services and PostgreSQL database be installed on the same system.

  • As a security consideration disable framework logs after upgrade is complete. To disable framework logs comment out the following properties in the common log properties file, log4j.properties and restart Connect:Direct Web Services.
    #Spring Framework appender
    #log4j.appender.Framework=org.apache.log4j.RollingFileAppender
    #log4j.appender.Framework.File=${log4j.logFilePath}/FrameworkLogs.log
    #log4j.appender.Framework.MaxFileSize=100MB
    #log4j.appender.Framework.MaxBackupIndex=20

    The log4j.properties is available under, $Install_Dir/mftws/BOOT-INF/classes/.

  • Connect:Direct Web Services PostgreSQL database does not support data encryption in the current release.