# Security

**URL:** https://community.sapphireims.com/c/platform/security/56.md

[Latest](https://community.sapphireims.com/latest.md) · [Categories](https://community.sapphireims.com/categories.md) · [Tags](https://community.sapphireims.com/tags.md)

---

## [About the Security category](https://community.sapphireims.com/t/about-the-security-category/115)

<div class="topic-metadata">

**Author:** [@admin](https://community.sapphireims.com/u/admin)\
**Replies:** 0

</div>

---

## [What is Host Header Injection and how to fix?](https://community.sapphireims.com/t/what-is-host-header-injection-and-how-to-fix/776)

<div class="topic-metadata">

**Author:** [@Haranath](https://community.sapphireims.com/u/Haranath)\
**Replies:** 0\
**Last updated:** [November 14, 2022, 7:04am UTC](https://community.sapphireims.com/t/what-is-host-header-injection-and-how-to-fix/776 "2022-11-14T07:04:12Z")

</div>

Follow the below document for Host Header Injection HostHeader.docx (256.9 KB)

---

## [Whether SapphireIMS support CyberArk integration? If yes, how it works?](https://community.sapphireims.com/t/whether-sapphireims-support-cyberark-integration-if-yes-how-it-works/92)

<div class="topic-metadata">

**Author:** [@harish](https://community.sapphireims.com/u/harish)\
**Replies:** 0\
**Last updated:** [January 12, 2021, 1:50pm UTC](https://community.sapphireims.com/t/whether-sapphireims-support-cyberark-integration-if-yes-how-it-works/92 "2021-01-12T13:50:46Z")

</div>

Yes, SapphireIMS do support integration with CyberArk Application Identity Manager(AIM) as a plug-in which may bear additional commercials. SapphireIMS has option to use either CyberArk Local Credential Provider(LCP) or …

---

## [How to enable HTTPS (SSL) in the SapphireIMS Application](https://community.sapphireims.com/t/how-to-enable-https-ssl-in-the-sapphireims-application/332)

<div class="topic-metadata">

**Author:** [@rupam.sharma](https://community.sapphireims.com/u/rupam.sharma)\
**Replies:** 1\
**Last updated:** [February 11, 2022, 5:59am UTC](https://community.sapphireims.com/t/how-to-enable-https-ssl-in-the-sapphireims-application/332 "2022-02-11T05:59:10Z")

</div>

To enable HTTPS (SSL) in the SapphireIMS Application please refer to the following Links: SapphireIMS Patch 4097 and above: How to Enable HTTPS in the SapphireIMS Application v1.0.4097+.html (201.6 KB) SapphireIMS Pat…

---

## [How to check the security/VA health of my SapphireIMS application?](https://community.sapphireims.com/t/how-to-check-the-security-va-health-of-my-sapphireims-application/446)

<div class="topic-metadata">

**Author:** [@Haranath](https://community.sapphireims.com/u/Haranath)\
**Replies:** 0\
**Last updated:** [March 22, 2021, 9:18am UTC](https://community.sapphireims.com/t/how-to-check-the-security-va-health-of-my-sapphireims-application/446 "2021-03-22T09:18:45Z")

</div>

Before any patch release, SapphireIMS quality assurance team performs VAPT scanning on whole product with Acunetix tool(https://www.acunetix.com/) and if any vulnerabilities found, it will be fixed by our engineering te…

---

## [What are the configuration to be done during SSL certificate import in to SapphireIMS application?](https://community.sapphireims.com/t/what-are-the-configuration-to-be-done-during-ssl-certificate-import-in-to-sapphireims-application/436)

<div class="topic-metadata">

**Author:** [@harish](https://community.sapphireims.com/u/harish)\
**Replies:** 0\
**Last updated:** [March 19, 2021, 8:18am UTC](https://community.sapphireims.com/t/what-are-the-configuration-to-be-done-during-ssl-certificate-import-in-to-sapphireims-application/436 "2021-03-19T08:18:08Z")

</div>

Please refer below online help link which gives detailed explanation on how to configure SSL certificate in SapphireIMS application using both self-signed and third party certificate authority. https://www.sapphireims.c…

---

## [Shall I trust SapphireIMS as secure application?](https://community.sapphireims.com/t/shall-i-trust-sapphireims-as-secure-application/430)

<div class="topic-metadata">

**Author:** [@harish](https://community.sapphireims.com/u/harish)\
**Replies:** 0\
**Last updated:** [March 18, 2021, 9:06am UTC](https://community.sapphireims.com/t/shall-i-trust-sapphireims-as-secure-application/430 "2021-03-18T09:06:26Z")

</div>

SapphireIMS engineering team always takes security as important measure on every patch release. We do check all security measures such a VAPT scanning on every patch release, updating dependent components on regular bas…

---

## [I want to hide my application server getting exposed to internet. What is the best way to handle this?](https://community.sapphireims.com/t/i-want-to-hide-my-application-server-getting-exposed-to-internet-what-is-the-best-way-to-handle-this/431)

<div class="topic-metadata">

**Author:** [@harish](https://community.sapphireims.com/u/harish)\
**Replies:** 0\
**Last updated:** [March 18, 2021, 9:11am UTC](https://community.sapphireims.com/t/i-want-to-hide-my-application-server-getting-exposed-to-internet-what-is-the-best-way-to-handle-this/431 "2021-03-18T09:11:58Z")

</div>

If you are looking for setting up SapphireIMS application behind proxy, then we suggest to setup one of the following to expose to outside world - Web application firewall Reverse proxy Load balancer Please refer anot…