topic Re: Securing a map service in ArcGIS Enterprise Questions https://community.esri.com/t5/arcgis-enterprise-questions/securing-a-map-service/m-p/725509#M27645 <HTML><HEAD></HEAD><BODY><SPAN>Hi Daniel,</SPAN><BR /><BR /><BLOCKQUOTE class="jive-quote"> Is that all there is to it, or is there anything else that can be done to secure the map service? </BLOCKQUOTE><BR /><SPAN> </SPAN><BR /><SPAN>Based on what you posted, you have restricted access to the web service. You can also implement some additional security measures, such as encrypting ArcGIS Server communication. Some resources:</SPAN><BR /><A class="jive-link-external-small" href="http://resources.arcgis.com/en/help/main/10.1/index.html#/Securing_ArcGIS_Server_communication/0154000005v2000000/" rel="nofollow" target="_blank"><BR />Securing ArcGIS Server communication - help documentation</A><BR /><BR /><A class="jive-link-external-small" href="http://video.arcgis.com/watch/1893/building-secure-applications" rel="nofollow" target="_blank">Building Secure Applications - Esri UC technical workshop video</A><BR /><BR /><SPAN>Hope this helps,</SPAN></BODY></HTML> Wed, 01 May 2013 16:56:18 GMT DerekLaw 2013-05-01T16:56:18Z Securing a map service https://community.esri.com/t5/arcgis-enterprise-questions/securing-a-map-service/m-p/725508#M27644 <HTML><HEAD></HEAD><BODY><SPAN>I have a 10.1 map service that I want to make secure. These are the steps that I took to secure it in ArcGIS Server Manager:</SPAN><BR /><BR /><SPAN>1. Created a role "PrivateServiceRole"</SPAN><BR /><SPAN>2. Created a user "PrivateServiceUser"</SPAN><BR /><SPAN>3. Granted "PrivateServiceRole" to "PrivateServiceUser"</SPAN><BR /><SPAN>4. Created a folder "PrivateService", checked "Require Encrypted Web Access", selected "Private, available only to selected users", added the role "PrivateServiceRole" to the Allowed roles list.</SPAN><BR /><BR /><SPAN>Here are the ArcGIS Server Security settings:</SPAN><BR /><BR /><SPAN>Configuration Settings</SPAN><BR /><SPAN>User Store: ArcGIS Server Built-in</SPAN><BR /><SPAN>Role Store: ArcGIS Server Built-in</SPAN><BR /><SPAN>Authentication Tier GIS Server </SPAN><BR /><SPAN>Authentication Mode: ArcGIS Tokens</SPAN><BR /><BR /><SPAN>Token Settings</SPAN><BR /><SPAN>Lifespan of Short-lived Tokens: 60 minutes </SPAN><BR /><SPAN>Lifespan of Long-lived Tokens: 1 day</SPAN><BR /><BR /><SPAN>I then viewed the service by logging in as "PrivateServiceUser" on the arcgis/rest/services page.</SPAN><BR /><BR /><SPAN>Is that all there is to it, or is there anything else that can be done to secure the map service?</SPAN><BR /><BR /><SPAN>For instance, in ArcGIS Server 10, I was able to go into IIS and set IP Address and Domain Restrictions and control which computers were able to access the page to get a token. With the Web Adaptor, that doesn't seem to be possible any more.</SPAN><BR /><BR /><SPAN>Thanks...</SPAN></BODY></HTML> Mon, 29 Apr 2013 15:53:52 GMT https://community.esri.com/t5/arcgis-enterprise-questions/securing-a-map-service/m-p/725508#M27644 DanielSanders 2013-04-29T15:53:52Z Re: Securing a map service https://community.esri.com/t5/arcgis-enterprise-questions/securing-a-map-service/m-p/725509#M27645 <HTML><HEAD></HEAD><BODY><SPAN>Hi Daniel,</SPAN><BR /><BR /><BLOCKQUOTE class="jive-quote"> Is that all there is to it, or is there anything else that can be done to secure the map service? </BLOCKQUOTE><BR /><SPAN> </SPAN><BR /><SPAN>Based on what you posted, you have restricted access to the web service. You can also implement some additional security measures, such as encrypting ArcGIS Server communication. Some resources:</SPAN><BR /><A class="jive-link-external-small" href="http://resources.arcgis.com/en/help/main/10.1/index.html#/Securing_ArcGIS_Server_communication/0154000005v2000000/" rel="nofollow" target="_blank"><BR />Securing ArcGIS Server communication - help documentation</A><BR /><BR /><A class="jive-link-external-small" href="http://video.arcgis.com/watch/1893/building-secure-applications" rel="nofollow" target="_blank">Building Secure Applications - Esri UC technical workshop video</A><BR /><BR /><SPAN>Hope this helps,</SPAN></BODY></HTML> Wed, 01 May 2013 16:56:18 GMT https://community.esri.com/t5/arcgis-enterprise-questions/securing-a-map-service/m-p/725509#M27645 DerekLaw 2013-05-01T16:56:18Z Re: Securing a map service https://community.esri.com/t5/arcgis-enterprise-questions/securing-a-map-service/m-p/725510#M27646 <HTML><HEAD></HEAD><BODY><SPAN>Thank you for the reply and links...</SPAN></BODY></HTML> Wed, 01 May 2013 17:11:13 GMT https://community.esri.com/t5/arcgis-enterprise-questions/securing-a-map-service/m-p/725510#M27646 DanielSanders 2013-05-01T17:11:13Z