WebLogic Console Security Validation Feature (Introduced since WLS July2021 PSU)

WebLogic 2021 PSU introduced few new features.

One of the most prominent/noticeable features introduced is the “WebLogic Console Security Validation Feature”.

With the July 2021 PSU applied, WebLogic Server regularly validates your domain configuration settings against a set of security configuration guidelines to determine whether the domain meets key security guidelines recommended by Oracle.

You now have a new section called “Security Validation” in the HomePage which consists of “Warnings Report” and “Warnings Configuration”.

If your domain does not meet a recommendation for a security configuration setting, a warning is logged in the Security Warnings Report in the WebLogic Administration Console.

Weblogic Domain can be configured to run in the following modes :

– Development mode

– Production Mode

– Secured Production Mode

The new Security Validation feature does a predefined set of Validation based on the Weblogic Domain mode configured.

Have a look at the following screenshots to understand the checks performed based on the Domain mode configured :

Development Mode :

Production Mode :

Secure Production Mode :