Security: Application Servers

The Blueriq Runtime can be deployed to Application Servers, like Tomcat and JBoss EAP. For the exact lis of supported Application Servers, see the Platform support page.

These Application servers don't usually come with secure default settings, so it is a good idea to harden them. As the Application Server that Blueriq runs on is not in Blueriq's control, your System Administrator should harden it.

Below are some links to get you started on Application Server security.

Tomcat

https://www.owasp.org/index.php/Securing_tomcat

JBoss EAP

https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.2/html-single/how_to_configure_server_security/index

Websphere Liberty Core

https://www.ibm.com/support/knowledgecenter/SSD28V_liberty/com.ibm.websphere.wlp.core.doc/ae/twlp_sec.html

Additional support may also be acquired from the vendor of the Application Server.