Some ?s Implementing ESS in LSF-90

**Do you allow access to ESS outside your network or implemented ESS out in the DMZ?
Every configuration is different. Some have it within the DMZ and some don't allow outside access.

**Did you have to buy a separate web server?
It depends. What is your volume? Your hardware budget? Your platform (NT or Unix?) I've installed and implemented on local and remote web server configurations.

**If you did, how many layers of security did you implement and what are they?
There is authentication, authorization, and application security just to name a few. Are you using laua or LSF9 security? There's several pieces to an ESS implementation that require more than this forum can really justify. Might want to check out some of the support documents or even some of the past CUE presentations.

**Do you force users to change their passwords periodically?
LSF9 does have that feature to allow users to change their own passwords. Now forcing them using aging is a different story. That could be dictated if your LDAP is set up that way.

-Roger

Thank you, Roger.

...follow up.

We want to allow outside access -

We're on an NT platform - if need be, we can and will buy a separate server (if necessary). We're a small company with (maybe a little over 300 employees)

We are using LSF9 security. I've never been to CUE - can you point me out to some of these documents?

Thanks again!!