Is JIRA in the DMZ using IIS as secure as Apache

[Gbowe]

We have a need to use JIRA beyond our developement group. We now want to setup security schemes and such and use the app as a helpdesk for our customers.

We are an all Windows environment and I would prefer to use IIS over Apache. However, I need to confirm that IIS,Tomcat/JIRA can be as secure as Apache,Tomcat/JIRA.

Thanks

[Tiago Comasseto · Accepted solution]

Hi Greg,

JIRA wouldn't be different than other applications when running behind a proxy and as far as I could see, both proxies have their vulnerabilities as well their advantages, I believe it's a matter of choose the one that fits better to your needs.

You may want to see the following articles:

• http://techtips.salon.com/secure-microsoft-iis-server-apache-server-1575.html
• http://searchsecurity.techtarget.com/tip/IIS-vs-Apache-Which-is-the-right-security-choice

Cheers