Securing Tomcat 7 for production

In this topic, we will discuss the best practices used for securing Tomcat 7. Securing Tomcat does not mean only Tomcat, it includes both Tomcat configurations and other infrastructure configurations. Let's first start with the Tomcat configurations.

Tomcat settings

There are different methods of securing Tomcat 7 and these come into picture based on the application's requirement and the security policy used by an IT organization.

Note

Every organization has their own security policies and the IT administrator follows them while implementing the security in Tomcat.

In Tomcat 7, there are different configurations, which need to be changed or enabled in order to secure Tomcat for the external environment. Let's discuss ...

Get Apache Tomcat 7 Essentials now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.