DataPower

 View Only
  • 1.  DataPower security settings

    Posted Wed December 14, 2022 12:51 AM
    Hi, We just running the command in idg commond line. We can get settings url-permissions "http+https".
    Can we just remove http configurations ? seems file permissions can be set but url-permission can't.
    ```
    idg# show running-config


    domain "Domain1"
    base-dir Domain1:
    base-dir local:
    config-file DomainHuJunJie.cfg
    visible-domain default
    url-permissions "http+https"
    file-permissions "CopyFrom+CopyTo+Delete+Display+Exec+Subdir"
    file-monitoring ""
    config-mode local
    import-format ZIP
    local-ip-rewrite
    maxchkpoints 3
    config-permissions-mode scope-domain
    exit
    ```

    ------------------------------
    JUN JIE HU
    ------------------------------


  • 2.  RE: DataPower security settings

    Posted Thu December 15, 2022 11:25 AM
    Hi sorry can you clarify why you would want to change these settings?
    Most customers typically don't change these settings.

    ------------------------------
    Matthias Siebler
    MA
    ------------------------------



  • 3.  RE: DataPower security settings

    Posted Thu December 15, 2022 12:08 PM
    As Matthias stated, this is a default setting for domains that is seen only when you run the `show running` command look at the startup configuration. The only reason anyone should ever modify this property is under direct advisement from the IBM DataPower Support team. If you look in the GUI or CLI, you will not see this property or find any public information about it. Note that this is one of many properties that if you dig deep you will discover are explicitly hidden but required for correct operation of the DataPower product.

    ------------------------------
    F Hackerman
    ------------------------------