Documentation Center

Audience Manager and Outbound E-mail best practices

This topic describes the best practices concerning security for Audience Manager and Outbound E-mail.

Synchronization Web pages

Audience Manager provides a Web page for synchronizing Contact and Segment data between the Content Manager Server and Presentation Server, and Outbound E-mail provides a tracking synchronization Web page to retrieve tracking information from the Tracking database. The synchronization Web pages should only be accessed by respectively the Synchronization service and the Collect Tracking Data service as the data that is returned is sensitive.

It is recommended to tightly secure the synchronization Web pages, for example as follows:

  • Restricted by IP range—only allow access from your Content Manager server(s)
  • Restricted by user—only allow access by a specific user as configured on the Synchronization Target
  • Place the synchronization Web pages inside the firewall (but with access to the databases used)
Password encryption
Encrypt passwords used in configuration files on the Content Manager (OutboundEmail.xml) and on Content Delivery (cd_audience_manager_conf.xml) using the encryption tools provided.