Websphere: security-constraint in web.xml is not enforced

Question

I\'m trying to enable SSL on a very old J2EE application I support. The application runs within WebSpehre 6.1. I\'ve enabled application security in the WAS profile running th

Answer 1

If you want to protect the whole application the following pattern should do the trick:

/*

At least this works on mine 8.5.5

    allApp
    
        allresources
        /*
    
    
        CONFIDENTIAL
    

Did you restarted the server after enabling application security?