soapwso2wso2-api-managerapi-gateway

disable soap in wso2 api manager gateway https://IPaddr:9443/services


I want to disable showing soap services in wso2 api manager 3.2.0 gateway.
enter image description here


Because of security risks (soap action spoofing) I don't want this page to come up. How can I restrict access to this page?


Solution

  • The above shared screenshot presents the Axis2 services that are deployed in the respective WSO2 API Manager, and the above mentioned can be accessed using :8243 (https://localhost:8243/services) and not :9443.

    You can disable listing the services by adding the following configuration to the deployment.toml of the respective WSO2 APIM Pack

    [n_http]
    'http.block_service_list'=true
    

    This will block the deployed services from listing in the mentioned endpoint