Novell IFOLDER 3 - ADMINISTRATION, Руководство пользователя

Страница: 99 / 148

Managing an iFolder Web Access Server 99
no
vd
ocx (
E
NU)
01
F
ebr
ua
ry
200
6
<httpRuntime
executionTimeout="300"
maxRequestLength="5120"
/>
If the
../webaccess/Web.config
values exceed the values in
../web/web.config
for
the enterprise server, you must also increase the sizes of runtime parameters in that file.
9.5 Securing Web Access Server
Communications
This section describes how to configure SSL traffic between the iFolder Web Access server and
other components. HTTPS (SSL) encrypts information transmitted over shared IP networks and the
Internet. It helps protect your sensitive information from data interception or tampering.
• Section 9.5.1, “Using SSL for Secure Communications,” on page 99
• Section 9.5.2, “Configuring the SSL Cipher Suites for the Apache Server,” on page 99
• Section 9.5.3, “Configuring the Web Access Server for SSL Communications with the
Enterprise Server,” on page 100
• Section 9.5.4, “Configuring the Web Access Server for SSL Communications with Web
Browsers,” on page 101
• Section 9.5.5, “Configuring an SSL Certificate for the Web Access Server,” on page 101
For information on how to configure SSL traffic on the iFolder enterprise server, see Section 8.7,
“Securing Enterprise Server Communications,” on page 94 .
9.5.1 Using SSL for Secure Communications
In a default deployment, the iFolder 3. x Web Access server uses SSL 3.0 for secure communications
between components as shown in the following table.
For more information about SSL 3.0, see Section 8.7.1, “Using SSL for Secure Communications,”
on page 94 .
9.5.2 Configuring the SSL Cipher Suites for the Apache Server
To restrict connections to SSL 3.0 and to ensure strong encryption, we strongly recommend the
following configuration for the Apache server’s SSL cipher suite settings.
• Use only High and Medium security cipher suites, such as RC4 and RSA.
• Remove from consideration any ciphers that do not authenticate, such as Anonymous Diffie-
Hellman (ADH) ciphers.
• Use SSL 3.0, and disable SSL 2.0.
iFolder Component Enterprise Server LDAP Server Client Web Browser
Web Access Server
X X