Enabling Dynamic WTP

Dynamic WTP protects your web pages while Tomcat applications are running, and can detect tampering of dynamic data, such as database data. It can be enabled with static WTP or separately.

Constraints and Limitations

  • Only the servers that are protected by the HSS WTP edition support the operations described in this section.

  • Dynamic WTP can be provided only for Tomcat of JDK 8.

Prerequisites

You are using a server running the Linux OS.

Procedure

  1. Log in to the management console.

  2. Click image1 in the upper left corner of the page, select a region, and choose Security > HSS. The HSS page is displayed.

  3. Choose Prevention > Web Tamper Protection, click Configure Protection.

    Note

    If your servers are managed by enterprise projects, you can select an enterprise project to view or operate the asset and scan information.

    **Figure 1** Entering the page for protected directory settings

    Figure 1 Entering the page for protected directory settings

  4. On the Configure Protection tab, toggle on image2 to enable Dynamic WTP.

    **Figure 2** Enabling Dynamic WTP

    Figure 2 Enabling Dynamic WTP

  5. In the displayed dialog box, modify the Tomcat bin Directory.

    To enable dynamic WTP, you need to modify the Tomcat bin directory first. The system presets the setenv.sh script in the bin directory for setting anti-tamper program startup parameters. After enabling dynamic WTP, restart Tomcat to make this setting take effect.

    **Figure 3** Configuring a Tomcat directory

    Figure 3 Configuring a Tomcat directory

  6. Click OK to enable dynamic WTP.