Version 

4.0

1.4.1 Security 

Considerations 

The SOAP based management application communicates with a SOAP 

server running on the ZXTM Admin Server, so the same security 

considerations apply: 

If a management network or IP based access control is in use to 

secure the Admin Server, these will affect the locations that the 

management application can run from.  

SOAP traffic is automatically encrypted using SSL. 

The ZXTM Admin Server will authenticate itself with its SSL 

certificate, which is generally self signed.   

You may need to ensure that your SOAP application accepts self 

signed certificates, or install a trusted SSL certificate in your ZXTM 

admin server. 

SOAP requests are authenticated using one of the users defined in 

the ZXTM Admin Server.   

The user must be in the `admin' group.  You may wish to define a 

specific username for your management application to use, so that 

you can track its activity using ZXTM's Audit Log. 

29