Experience Optimization security best practices
This topic describes the best practices concerning security for Experience Optimization.
- Experience Optimization Deployment Web Service
- If you use the Experience Optimization Deployment Web Service (for remote deployment), set it up to use SSL (HTTPS) and a specific user. You may also want to limit the IP range that can access it, to the IP address of your Content Deployer machine(s).
- Experience Optimization Web service
- If possible, secure the Experience Optimization Web Service (for querying). Set up your firewall to restrict access to the Experience Optimization Web Service, only allowing access from your own Web servers.
- Password encryption
- Experience Optimization provides a command line tool for encrypting sensitive data such as passwords in your configuration files (
smarttarget_conf.xml).