Can Content-Security Policy configured in Application Server (Weblogic)? - security

We are using only Weblogic and no Webserver, Load balancer.
Is it possible to configure Content-Security Policy in Application server specifically Weblogic?

Related

Azure Load Balancing with sticky session

I have web API service which I planned to host in Azure environment probably in VM.
My application is using sticky session and I have to enable the Load Balancer in Azure.
Can you please suggest best approach to load balance the application Or Can I use Azure Loadbalancer with sticky session other than Application gateway.
Regards
Abdul
You can set the sticky session in load balancer rules with setting the session persistence as the client IP. And the steps like this.
There is some difference between the Application Gateway and Load Balancer.
So if you will do some changes in VM, the Load Balancer is better. If not, the application Gateway is better and can be safer for web access.

Client certificate with Azure Application Gateway

I have two VMs with IIS that host my application with Azure Application Gateway distributing the traffic. The gateway is configured to offload SSL and everything is working fine.
However, I'd like to use client certificate authentication on one of the paths of the application - on NetScaler (or some other load balancer) I'd simply put serialized client certificate into HTTP Header (X-Client-Cert).
Can I do something similar with Application Gateway?
At the moment thats not possible, but is in the pipeline of product development of the azure product team.

How Azure Application gateway is using for multitenant Application

Here We want to redirect application gateway to https we don't want to manually enter https to get on SSL.
We use the gateway for fabric we want all application on fabric using SSL.

Web Application Proxy + Azure WebRole

I am using Azure PAAS. All database servers, application servers and proxy servers are with in my virtual network.
How to setup web application proxy for azure web role?
Change webrole endpoint to Localhost and enable Firewall rule Http trafic in. then site can access form proxy server.
Using web application proxy setup https://technet.microsoft.com/en-us/library/dn383650.aspx we can configure proxy for web role.

confusion about Openam load balancer url

Q1: Is there a build-in load balancer in OpenAM?
Q2: When configuring site during installing OpenAM,I was confused about load balancer url.Is it a url for proxy like lvs/haproxy/nginx? or What it is?
A1: No, OpenAM does not have a built-in LB
A2: the site URL can point to a VIP on a HW-LB, HTTP reverse-proxy ,etc. Apart from being a prerequisite for SSO Session failover it 'only' controls the communication path between OpenAM client SDK based applications (like Web/J2EE agents) and OpenAM infratstructure. When configured the client SDK use the primary site URL to communicate with OpenAM infrastructure. When there is no site configured OpenAM client SDK will communicate with the 'authoritative' server of a given SSO session directly.
You don't need to configure an OpenAM site just to deploy OpenAM behind an LB or RP

Resources