Page 1 of 1

PTV Ajax Maps on HTTPS

Posted: Wed Nov 29, 2017 10:47 am
by cpitsillidis
We have a customer who is using our solution with Xserver and during a recent security audit a couple of things have been highlighted as High Risk around the PTV Ajax Maps.

- It is using http rather than https
- The analysts were able to reach the Tomcat and also Application Admin Logon screens

Would you be able to advise/assist in being able to remove the Tomcat and Admin screens from being available and also to switch from http to https ?

XServer/AjaxMaps are installed on the customer's own hosted system

Re: PTV Ajax Maps on HTTPS

Posted: Wed Nov 29, 2017 1:51 pm
by Bernd Welter
Hi there,
the topic is also requested in this post
http://xserver.ptvgroup.com/forum/viewt ... f=43&t=726

I therefore simply lock the one here...
Bye,
Bernd