Configuring security

In order to protect your ITNM installation against malicious attacks by intruders you must perform the following tasks.

Configuring cookies
The Network Manager web applications use cookies to track users across requests. Although these cookies are not themselves sensitive, they could be used by an intruder to impersonate you on the system. Since network traffic often travels over untrusted networks, these cookies must be encrypted using SSL
Protecting against clickjacking
If you integrate Network Manager web applications into your own product, be aware that the integration will not be able to display the Database Access GUI and the Discovery Configuration GUI, due to a protective filter implemented within Network Manager. These two GUIs contain sensitive information; preventing integration of these two GUIs protects you against clickjacking, whereby an intruder creates a GUI overlay to capture data. You can disable the filter; however. this is not recommended.

Parent topic: Configuring Network Manager