I want to disable showing soap services in wso2 api manager 3.2.0 gateway.
Because of security risks (soap action spoofing) I don't want this page to come up. How can I restrict access to this page?
The above shared screenshot presents the Axis2 services that are deployed in the respective WSO2 API Manager, and the above mentioned can be accessed using :8243 (https://localhost:8243/services) and not :9443.
You can disable listing the services by adding the following configuration to the deployment.toml
of the respective WSO2 APIM Pack
[n_http]
'http.block_service_list'=true
This will block the deployed services from listing in the mentioned endpoint