Security and Stability

The purpose of this page is to offer advice on how to securely and reliably host iDempiere either in your LAN or in the cloud. This page is a summary of the many topics discussed at greater lengths on other pages. Please note that hosting iDempiere can be very simple of very complex depending on the needs of your installation. Factors that drive complexity include:
  1. Number of concurrent users
  2. Need for high availability and redundancy
  3. Number of sites or locations
  4. Number of users connecting from the road
If you are hosting for just 3 to 5 people, the process is simple. If you are hosting for 300 concurrent users, the process is much different. Reference iDempiere Security Page

2014-09-18 Security and Stability Discussion

Crowd Sourced Security

Other topics not mentioned in the first video

  1. SSL for all user transactions
  2. Removing the version from the login
  3. Changing permissions on the idempiereENV.properties file to where only the idempiere system user can access it
  4. Preventing access to the database except for specific machines in the same subnet.
  5. Server vulnerability scanning - options and techniques discussed here
  6. iDempiere newer security features

Security Discussion by Carlos Ruiz

https://www.youtube.com/watch?v=mhjA1B4PHFs&list=PL-yzcOCOKCBPGQtao8Np1mFNMrl8Y-3hZ&index=1