Knowledge Base

Enhanced Feature Overview: Security

Esta pagina no esta disponible en Español. Rogamos su comprension.
  • Web server supports SSL encryption (HTTPS)
  • All communication between probe and core is secured by SSL encryption
  • Web server checks the user account and the user’s rights before delivering any webpage
  • Web browser sessions are stored in a session cookie and time out after 20 minutes (if user is inactive)
  • Web server does not deliver files from folders that are not configured by PRTG (avoids directory traversal attacks)
  • PRTG’s internal data management is not based on an SQL server, so SQL injection attacks are impossible
  • User accounts require a password
  • Internally stored passwords are always stored in an encrypted format
  • Sensor script files and notifications can not be edited within the web interface, users must have access to the file system to edit them (avoids users with access to the web interface to inject and run malicious scripts on the PRTG system)