Symantec Access Management

We have a requirement to start using a session store with SiteMinder 12.7.  We are going to use CA Directory.  Wondering if we need to ssl protect the session instance.  If someone was sniffing the line, could any of the entries being written to the database be used in a malicious way?

Thanks

Hello Sam,

Yes, you can enable SSL to CA Directory Session Store to prevent packet sniffing.

You can also consider using firewall or other network equipment to prevent access to machines.

I hope this helps.

Regards,

Osarobo

Thanks Osarobo but that wasn't my exact question.  I know I can enable SSL, my question is wondering if there is anything useful being written across the wire that could be used in a malicious way.  So if someone told me that none of the session data being written to the session store could be used to circumvent security, then I would say why bother with SSL.

Sam

Sam this may be more of a siteminder question than it is CA Directory