Security & connectivity
What should I secure before enabling DNC or MDC web access?
Updated
DNC-MaxMDC-MaxWeb clients
Direct answer
Treat a web client according to the actions it exposes, not as a harmless dashboard. Define roles, restrict network reachability, require named authentication, use encrypted remote connectivity, patch the server, and log sensitive actions such as program transfer or status changes.
Practical checkpoint
From a least-privileged test account, verify that users can reach only the machines, reports, and commands required for their job—and that denied actions remain denied remotely.