Question
CTS
AU
Last activity: 12 Dec 2019 5:22 EST
How to protect Pega API services against denial of service and brute force attacks
Hi Pega Community,
As part of Pega robotics runtime, Pega API services are heavily invoked. This could expose security threats. How would we prevent these cyber security threats that are denial of service and brute force attacks etc?
We are looking to hear from the forum.
Hi Pega Community,
As part of Pega robotics runtime, Pega API services are heavily invoked. This could expose security threats. How would we prevent these cyber security threats that are denial of service and brute force attacks etc?
We are looking to hear from the forum.
Thank you in advance.
Anur Kalithas
Coforge DPA
GB
Hi
You can refer the security checklist provided by Pega:
https://community.pega.com/knowledgebase/articles/security/security-checklist-deploying-applications
If there is anything specific you need, raise an SR .
Regards
Bhavya
BPM Company
NL
Generally, you should host your server on internal network and/or use https connection with authentication (Base, OAuth etc..). By doing that you will allow to connect only those client machines which you define.