Securing PackageShare web application on Symantec Management Platform server

Products

• IT Management Suite

Issue/Introduction

The Altiris Administrator wants to deny access to packages for non-authenticated users.

Anonymous access for PackageShare on Package Servers is controlled with the "Package Service Settings" policy under the "Security Settings" section as seen here:

However, this does not apply to the Symantec Management Platform (SMP server).

Environment

ITMS 8.7

Cause

Product design

Resolution

To disable anonymous access to packages hosted on the SMP Server and allow only authenticated users to access package share and packages, do the following:

1. Open the IIS manager on the SMP server
2. Select PackageShare web app
3. Change the Authentication feature to:
   1. Anonymous Authentication - disabled
   2. Windows Authentication - enabled

Note: This only applies to Default Web Site and not Symantec Agent, which is dedicated to Cloud-enabled Management where authorization is based on client certificates.