How to disable directory browsing with Web Agent

Products

• CA Single Sign On Agents (SiteMinder)

Issue/Introduction

We are able to browse to the web agent's \samples (/siteminderagent) directory within our applications.

We have Directory Browsing disabled in IIS but they are still able to browse to it.  Is there a way to use the Web Agent to prevent browsing of the /siteminderagent folder?

Environment

Release : 12.8 WebAgent

Component : SMIIS

Cause

The Web Agent does not have any  effect on directory browsing.  Check with the web server vendor if browsing is disabled yet users are able to browse one or more folders.

Resolution

The web server is responsible for allowing/denying directory browsing, however, protecting the /siteminderagent folder with Siteminder will prevent users from browsing the folder.  Be sure the IgnoreExt ACO parameter has the correct values if you protect /siteminderagent and still need to serve forms from it.