topic ArcGIS Server and Portal Security in ArcGIS Enterprise Questions https://community.esri.com/t5/arcgis-enterprise-questions/arcgis-server-and-portal-security/m-p/419449#M16285 <HTML><HEAD></HEAD><BODY><P>I have been thinking and reading a lot about ArcGIS for Server security lately.&nbsp; My current dev server has the web adapter up and running, the rest services directory turned off, and SSL enabled.&nbsp; Currently users connect independently (not through Portal) though Flex Viewer apps and security is handled by domain user at the IIS (Web Tier) Level.&nbsp; Users do not have direct access to the SQL DB, nor can they login through ArcMap (most dont even have it).&nbsp; When installing ArcGIS Portal and Federating the server I seem to have lost all ability to access ArcGIS Manager and now all service securities are run through Portal which seems to not function quite as well as through Manager.&nbsp; </P><P></P><P>My question is what security holes am I leaving open?&nbsp; What access point have I left vulnerable?&nbsp; If I mark all services as 'public' and have the rest directory turned off, with no username access to portal, through ArcMap, or though SQL what potential hazards could I be facing?&nbsp; It is also worth mentioning that all of this is only accessible through our internet and will not be on the internet.&nbsp; Another thought...&nbsp; What are your opinions of SSL in an intranet?</P><P></P><P>Thanks and I look forward to your responses! </P></BODY></HTML> Fri, 07 Aug 2015 15:35:53 GMT PhilipSlater 2015-08-07T15:35:53Z ArcGIS Server and Portal Security https://community.esri.com/t5/arcgis-enterprise-questions/arcgis-server-and-portal-security/m-p/419449#M16285 <HTML><HEAD></HEAD><BODY><P>I have been thinking and reading a lot about ArcGIS for Server security lately.&nbsp; My current dev server has the web adapter up and running, the rest services directory turned off, and SSL enabled.&nbsp; Currently users connect independently (not through Portal) though Flex Viewer apps and security is handled by domain user at the IIS (Web Tier) Level.&nbsp; Users do not have direct access to the SQL DB, nor can they login through ArcMap (most dont even have it).&nbsp; When installing ArcGIS Portal and Federating the server I seem to have lost all ability to access ArcGIS Manager and now all service securities are run through Portal which seems to not function quite as well as through Manager.&nbsp; </P><P></P><P>My question is what security holes am I leaving open?&nbsp; What access point have I left vulnerable?&nbsp; If I mark all services as 'public' and have the rest directory turned off, with no username access to portal, through ArcMap, or though SQL what potential hazards could I be facing?&nbsp; It is also worth mentioning that all of this is only accessible through our internet and will not be on the internet.&nbsp; Another thought...&nbsp; What are your opinions of SSL in an intranet?</P><P></P><P>Thanks and I look forward to your responses! </P></BODY></HTML> Fri, 07 Aug 2015 15:35:53 GMT https://community.esri.com/t5/arcgis-enterprise-questions/arcgis-server-and-portal-security/m-p/419449#M16285 PhilipSlater 2015-08-07T15:35:53Z