Protect against attacks that could deny a service by:
- Installing the latest security patches.
- Replacing the default Admin Superuser (admin) immediately after a manual database installation or an upgrade from P6 version 7.0 and earlier.
- Ensuring log settings meet the operational needs of the server environment. Do not use "Debug" log level in production environments.
- Documenting the configuration settings used for servers and create a process for changing them.
- Setting a maximum age for the session cookie on the application server.
- Protecting access to configuration files with physical and file system security.