Let's Not Publish Our Portals
The IT Portal Support Team recently identified a security incident involving a partner's portal in the US Cloud experiencing repeated login page requests. Investigation revealed the portal address had been published on the partner's website, making it vulnerable to attacks.
Security Recommendations
To protect your IT Portal, we advise:
- Keep portal access private: Do not publish your Portal address anywhere online
- Enable strong authentication: Implement 2FA or SAML-based authentication (KB7249)
- Restrict network access: Use VPN and IP access restrictions (KB24)
- Monitor suspicious activity: Consider enabling email notifications for failed login attempts (KB36)
Key Message
Let's work together to keep our data secure. IT Portal itself does not publish portal access on its website and we recommend partners adopt similar practices.
Contact: [email protected] for security questions
