Critical E-Business Suite Release 11i Security Documentation


While I'm stepping (very gingerly) through the security minefield, I might as well dust this one off, too:

A number of customers have recently reported security issues which may have been avoided if they had followed Oracle's published recommendations on securing E-Business Suite Release 11i environments.  All E-Business Suite Release 11i system administrators and security professionals should have the following crucial documents committed to memory:
Even if you've read earlier versions of these documents, I'd strongly recommend taking another look at the latest versions.

Comments (3)

Just wonder if you going to implement the recommendations reflected in the highlighted documents using autoconfig/templates methodology?
So far it looks to me that those recommendations implementation require a lot of customisations.
If to implement those recommendations through supported autoconfig customization way we would end up with hard to support environment. In the other hand if you will implement those in templates/autoconfig you would make OEBS more secure automatically.

Just my 0.02£,
Yury

Steven Chan:

That's an interesting suggestion, Yury. I'm going to have to circulate this internally amongst our security architects. I'll post an update once this reemerges from the process.

Regards,
Steven

Steven Chan:

A quick update on this: Our AutoConfig and Security teams have confirmed that best-practices security recommendations that apply uniformly to all E-Business Suite customers are already implemented automatically by AutoConfig.  This is one of the reasons we encourage everyone to keep up-to-date with the latest AutoConfig template updates like the recently-released AutoConfig Template Rollup Patch M.There are a number of other security recommendations from the Best Practices guide that we're planning to implement automatically in AutoConfig; these might take more time to automate given their potential sensitivity to current environment configurations and customer requirements.  I'll be sure to announce these in this blog as they become automated.Regards,Steven

Post a comment

(If you haven't left a comment here before, you may need to be approved by the site owner before your comment will appear. Until then, it won't appear on the entry. Thanks for waiting.)

Google Search

Archives

Subscribe to Updates

Powered by
Movable Type and Oracle