|
POST
|
You can also configure a view on your hosted feature service. If you haven't seen it, check this out: https://downloads.esri.com/RESOURCES/ENTERPRISEGIS/Limiting_Access_to_Public_Survey123_Results.pdf This and other docs are available under the documents tab in the ArcGIS Trust Center.
... View more
07-22-2021
01:50 PM
|
0
|
0
|
2050
|
|
POST
|
I think that the issue is that you're sending a POST with query parameters in the URL string instead of inside the post body.
... View more
05-26-2021
10:01 AM
|
0
|
1
|
2838
|
|
POST
|
That message is coming from Office365 - guessing you use AzureAD for your enterprise accounts? Sounds like a policy is in place limiting the apps/browsers that your org allows to access the IDP.
... View more
05-25-2021
01:31 PM
|
1
|
2
|
2324
|
|
POST
|
Yes, I provided it to OP via PM. Its in a raw format and not yet ready for public. It is current as to 10.8.1. It was compiled of this list: https://enterprise.arcgis.com/en/portal/latest/use/supported-items.htm plus the output of this command: https://devblogs.microsoft.com/scripting/hey-scripting-guy-how-can-i-use-windows-powershell-to-pick-out-the-unique-file-extensions-used-in-a-collection-of-files/ Then filtered for extensions that should not be allowed (eg: executables, config files, etc.)
... View more
05-03-2021
12:48 PM
|
1
|
0
|
6364
|
|
POST
|
I dislike this kB. It will be ignored by those who require web server hardening. A better resource would include a list of custom extensions that can be allowed rather than a statement saying essentially "don't harden your web server".
... View more
05-03-2021
12:29 PM
|
0
|
2
|
6373
|
|
BLOG
|
@DanielGarcia - MFA is supported natively in ArcGIS Enterprise starting in 10.9.
... View more
03-04-2021
02:25 PM
|
1
|
0
|
4910
|
|
BLOG
|
A few weeks back we had the opportunity to participate in an Esri GeoDev webinar, where we went into detail about technical and non-technical controls to help #ArcGISOnline be more secure, respect privacy, and prevent propagation of "fake news". We explain ArcGIS Online configuration options and best practices, explore the need for processes and pipelines to govern information delivery, and demonstrate tools to help regularly monitor the security and sharing status of both ArcGIS Online items and the ArcGIS Online organizational account as a whole. We also introduce and discuss Esri’s product security incident response team and discuss Esri’s incident response process. Key take-aways: *Leverage "Organization Specific Logins" whenever you can *Enable MFA to ensure non-repudiation *Build processes for content validation before sharing *Join Esri's Verified Organization Program: Be the source of truth! *Use the ArcGIS Advisor to validate your Org settings https://www.youtube.com/watch?v=O1eI34xEVNw
... View more
12-09-2020
09:11 AM
|
0
|
0
|
1363
|
|
BLOG
|
Esri Software Security and Privacy has recently released a new technical paper: Considerations for configuring antivirus software for ArcGIS Enterprise hosts This document augments the existing kB: FAQ: Which ArcGIS Enterprise directories should be excluded for security or antivirus software? And is a valuable resource for teams installing, configuring, and administering ArcGIS Enterprise Hosted in the customer only section of the ArcGIS Trust Center documents repository, this paper dives deep into: Defining Risk Factors that influence virus scanning decisions Differentiating between Anti-Virus tools and methods Describing workflows where virus scanning activities should be relaxed Identifying files, directories, and processes to exclude from active scans
... View more
12-09-2020
09:03 AM
|
2
|
30
|
12586
|
|
POST
|
Sounds like unfortunate phrasing...full disclosure, I was in support 11 years, a technical lead for Enterprise Teams for 6. Service data is NEVER too large. Taken straight up, that's incorrect. However, there may be optimization to be done. For instance, there may be scale dependences to be set or feature generalization that will help. For instance, it's pretty frequent for users to attempt to draw every point and vertex at a small scale. Like, it doesn't make sense to show every vertex in a complicated geometry at a state level scale, nor would you want to attempt to visualize every house as a single point. Unless the map is cached, that'll cause real performance issues as all that geometry is sent from the server to the client. That's especially true with editable layers. I'd use scale dependent rendering and symbolize for heat maps and generalize those vertices. I also tend to separate my maps into thematic layers instead of one big uber service and mash them together client side. I find that more scalable for maintenance and helps rendering speed (one godzilla feature won't slow your whole app down). At larger scales you can get more granular. A broad statement like "you have too much data" is patently incorrect. I have highly performant customers with terabytes of data I speak to regularly.
... View more
11-02-2020
01:11 PM
|
0
|
1
|
1863
|
|
POST
|
That's unusual. The web tier (IIS) isn't really dependent on the Enterprise GIS - the web adaptor is basically a proxy and only talks to ArcGIS Enterprise over HTTP(s). How was this issue addressed? Did you reinstall it or did you reregister the web adaptor with the GIS Server? It would helpful to understand better understand the issue prior to providing advice. A Windows update is more likely to impact IIS (specifically ASP.Net) than ArcGIS Enterprise.
... View more
10-29-2020
10:42 AM
|
0
|
3
|
1863
|
|
POST
|
I'm pretty sure that the federated endpoints are automatically added to the allowed proxy hosts list. Requests to servers that are not allowed receive a http 403 response.
... View more
10-16-2020
06:24 AM
|
2
|
0
|
3190
|
|
POST
|
Why do you want to update the sharing permissions on the caching controllers in the first place?
... View more
10-06-2020
06:26 AM
|
0
|
0
|
2200
|
|
POST
|
I'm thinking this could be a CORS issue. What messages, if any, do you get in the browser console?
... View more
09-17-2020
12:46 PM
|
1
|
1
|
999
|
|
BLOG
|
The Esri Software Security and Privacy Team is proud to announce the newest in our white paper series: Discovering and Limiting Access to Public ArcGIS Survey123 Results! Written for Survey Authors, admins, and privacy professionals and specifically intended to provide targeted guidance for public health initiatives, this guidance highlights best practices, public survey layer discoverability, details specific scenarios, and provides contextual discussion around the various configuration options to be considered to protect your data prior to announcing a public survey where results are to remain secure. From the abstract: "Designing and configuring a Survey with an underlying survey layer can be tricky when the survey is intended to be completed by the public. Discovering insecure survey layers can be challenging for an organization administrator responsible for ensuring collected data is secure and configured to respect respondent privacy. This document provides guidance for GIS administrators, survey owners or users involved in implementing a public survey with respect to privacy and security." We partnered with the ArcGIS Survey123 team to provide this guidance, and we strongly feel that organizations see value in bookmarking this document for reference.
... View more
08-07-2020
09:00 AM
|
1
|
0
|
1155
|
|
POST
|
I don't see this in my reports in my federated environment, but makes sense to me. There's a difference between authenticated and authorized. Not every user that is authenticated should be authorized to this resource. Only publishers or higher should have rights to caching controllers. Otherwise an unauthorized user could potentially kick off a caching job on a service and cause resource consumption issues or fill up your disk with tiles.
... View more
07-28-2020
10:12 AM
|
0
|
0
|
2200
|
| Title | Kudos | Posted |
|---|---|---|
| 3 | 11-17-2025 07:06 AM | |
| 1 | 05-24-2018 07:28 AM | |
| 2 | 05-12-2025 07:33 AM | |
| 1 | 04-29-2025 10:45 AM | |
| 1 | 03-20-2025 08:11 AM |
| Online Status |
Offline
|
| Date Last Visited |
3 weeks ago
|