...

To connect to your web server using SSL you will need to configure it manually, as it is not configured with SSL by default. You will need to purchase or generate a server certificate that authenticates your server to the clients. This configuration differs depending on the host operating system and the web server software you use. The following resources may help:

• Securing Your Apache 2 Server with SSL
• Van's Apache SSL/TLS mini-HOWTO
• How to implement SSL in IIS

Even if you must allow access to some accounts through standard HTTP, ensure that HTTPS is used to access more sensitive accounts such as those in the Admin group or with login access to the  Admin Console.

Restrict Login Access to the the

Companyname

 Server

A root user on Unix/Linux or a user in the Administrators group in Windows can circumvent 

Companyname

 internal security by modifying program and data files or directly changing data in the database, including passwords. However, even an unprivileged user can circumvent security by using local web access to exploit some of the special debugging features of 

Companyname

 such as the JMX console, as shown below, that are not accessible to connections from outside the server.
Image RemovedImage AddedJMX Agent View Wizard

Restrict Services Accessible on the 

Companyname

 Server

...