Application Security: Best Practices

• Strategy

Application Security - Best Practices:

Security Assurance Program

Strategy has a comprehensive security program focused on protecting your data, regardless of whether our product is deployed via our Cloud Managed Service offering or on premises. From engineering through vulnerability remediation, we are committed to ensuring that our products continually meet your business and security needs.

How to configure redirect URL whitelist in Strategy Web and Library 2021 Update 1 and newer

This article describes supplementation configuration which may be applied to restrict outbound absolute URLs within the Strategy Web and Library to only those found in a whitelist. This does not apply to relative path URLs.

How to configure redirect URL whitelist in Strategy Web and Library 2019 Update 7, Update 8 and 2020 Update 4

How to Disable Apache HTTP Server on Window-based Systems

Strategy 2021 and 2020 for Windows-based systems may also have an Apache HTTP server installed. This service is no longer needed and we recommend it be disabled.

How to Configure Strategy Web and Library to use Secure Cookies

Strategy's web-based products such as Library and Web use cookies. Learn how to enable secure cookies as a result of infrastructure hardening, corporate best practices, or security scanner findings.

How to Enable ACLs on Zookeeper used by Strategy Platform Analytics

This article describes supplementation configuration which may be applied to Strategy Platform Analytics implementations versions 2020 and higher.

Strategy Platform (Early Adopter)
Database ObjectType of Permissions RequiredTablesSelect, Insert, Update, Create, Drop, DeleteIndexesCreate, DropTriggersCreate, DropFunctionsCreate, ExecutePackagesCreateProceduresCreate, Execute Standard Verification (default - explicit)Standard Verification (default - implicit)JDBCjdbc:exa:exadb1.example.com:8563; validateservercertificate=1jdbc:exa:exadb1.example.com:8563
ODBCEXAHOST=exadb1.example.com
SSLCertificate=SSL_VERIFY_SERVER
EXAHOST=exadb1.example.com
Connection string examples 1Connection string examples 2JDBCjdbc:exa:exadb1.example.com/<fingerprint>:8563 jdbc:exa:exadb1.example.com:8563; fingerprint=<fingerprint>;ODBCEXAHOST=exadb1.example.com/<fingerprint>:8563 EXAHOST=exadb1.example.com:8563;fingerprint=<fingerprint>; Connection string examples 1JDBCjdbc:exa:exadb1.example.com:8563;validateservercertificate=0 ODBCSSLCertificate=SSL_VERIFY_NONE JDBCjdbc:exa:exadb1.example.com:8563;legacyencryption=1ODBCUseLegacyEncryption=Y Connection string examples 1JDBCjdbc:exa:exadb1.example.com:8563;encryption =0 ODBCencryption=N LanguageDateNumberCurrencyPercentageGermandd.mm.yyyy12.345,00123.456,7812,34%Spanishdd/mm/yyyy12.345,00123.456,7812,34%English (US)mm/dd/yyyy12,345.00123,456.7812.34%English (UK)dd/mm/yyyy12,345.00123,456.7812.34%Frenchdd/mm/yyyy12 345,00123 456,7812,34%Italiandd/mm/yyyy12.345,00123.456,7812,34%Japaneseyyyy/mm/dd12,345.00123,456.7812.34%Koreanyyyy-mm-dd12,345.00123,456.7812.34%Portuguese (Brazil)dd/mm/yyyy12.345,00123.456,7812,34%Swedishyyyy-mm-dd12 345,00123 456,7812,34%COLUMNPURPOSEDATATYPEMR_SUB_IDSubscription Portal generated Subscription IDNumeric/Int (Must be unique)MR_ADDRESS_IDID of the addressText/VarCharMR_USER_IDNarrowcast User IDText/VarCharMR_SUB_SET_IDSubscription Set IDText/VarCharValueEffect1Unicode (UTF-8) support is enabled.0No Unicode support.

Best Practices

Authentication ⟩

Authorization ⟩

Encryption ⟩

Web Security ⟩

Comment

0 comments

Details

Knowledge Article

Published:

December 20, 2020

Last Updated:

March 15, 2021