Security

Access to the QMWISe method should be made as secure as possible. If the data passes between your application can be encrypted using SSL it is recommended that you do so. If your Perception Server also contain high-stakes assessments it is recommended that you limit the communication between QMWISe and other servers to only known trusted servers. This can be done by controlling access using IIS.

This chapter discusses the security options that are available for QMWISe and is divided in to:

• In-built security
• QMWISe header information
• Using SSL
• Using IIS to control access by domain and IP address