Sitecore.config update in Sitecore 10

latest Sitecore 10.0 released !!!


And I was so curious about new updates in Sitecore 10.0

In this article, I would like to share few updates in Sitecore.config 

• Now all default Sitecore Sites moved from /App_Config/Sitecore.config to /App_Config/Sitecore/CMS.Core/Sitecore.Sites.config 

• And Now tracking related Service pages(error, Heartbeat, keepalive, nolicense) are also moved from Sitecore.config to Sitecore.Sites.config as Site attribute. which mean now we can manage above service pages on Site level.

• New Service page introduced as below service/nopublishable.aspx

Avoid Anonymous access for Sitecore Admin Pages on Live Site

On today post, will discuss on securing Sitecore admin page on live site from anonymous user to access.

But first I will tell you that how anonymous can access Sitecore admin page of any live Site with their basic common sense and smart guess. And then will know how to protect Admin pages to Save business from unknown users.

As a Anonymous user, 

How I can know which Web Application developed on Sitecore CMS?

Answer is very easy - https://whatcms.org/

Once knew web Application is on Sitecore, then follow approach of Hit-n-Try, by accessing Admin Page and if you are smart Guy then you may know what next to do.

But please avoid to do this as Anonymous user, Be a Good man. And if you are going to find any Site's admin page accessible as Anonymous user then please let them (Organization) Know.

Now come to the point, that how to avoid of anonymous access Sitecore Admin Pages on Live Site

And we can do this with different approaches by restriction on IP access or location. But here I will mention a very easy way to secure.

By disabling anonymous access in internet information services (IIS) manager

For that follow below steps:

• Open the IIS
• Navigate to the Sites\<Target WebSite>\App_Config folder.
• In Features View, double-click Authentication.

• In the Authentication window, select Anonymous Authentication and in the Actions panel, click Disable.

• Repeat these steps for /sitecore directory.

Please share your comments/Feedback if any.