Skip to main content

This content is closed to future replies and is no longer being maintained or updated.
Links may no longer function. If you have a similar request, please write a new post.

Question

 Perampalam Rajakulasingam (PerampalamR16908941)
HSBC

HSBC
LK
PerampalamR16908941 Member since 2023 1 post
HSBC
Posted: Oct 6, 2023
Last activity: Oct 9, 2023
Posted: 6 Oct 2023 10:54 EDT
Last activity: 9 Oct 2023 2:10 EDT
Closed

Blocking any URLs other than SSO including PRServlet in Production Environment

Hi All

First of all thanks for sharing your experience on this.

We have the requirement to block all URL including PRServlet  other than SSO url  in production for security purposes.

This is the environment.

Pega 8.8.2

Tomcat - Kubernetes container base platform

it is working properly  in WAS app server . we configured in WAS only. but we do not know how to do for Tomcat.

Please help me on this.

Thanks in Advance

Regards

Kulam

 

To see attachments, please log in.
Pega Platform 8.8.2
Client-managed Cloud
Financial Services
Solutions Consultant

Posted: 1 year ago
Posted: 9 Oct 2023 2:10 EDT
Anthony Gourtay (Anthony_Gourtay)
Proximus
Expert Engineer - PEGA Application Management
Proximus
BE

@PerampalamR16908941

You can use below line in prconfig.xml

<env name="security/urlaccessmode" value="deny"/>

This will block PRServlet login screen

Valid values are:

  1. Allow – disable validation
  2. Deny – send an exception to the client and stop processing
  3. Warn - print log message when tamper detected but allow the action anyway

Regards

Anthony

To see attachments, please log in.

We'd prefer it if you saw us at our best.

Pega Collaboration Center has detected you are using a browser which may prevent you from experiencing the site as intended. To improve your experience, please update your browser.

Close Deprecation Notice