Securing Jira Software 7.7.0 and Confluence 6.6.2

[Goran Nikolić]

Hello.

What could be done to secure Web access to Jira Software 7.7.0 and Confluence 6.6.2?

[Benjamin]

@Goran Nikolić ,

First, you should set both sites to HTTPS. Second, upgrade your sites to the latest LTS version to be up to on security vulnerabilities and to have ongoing Atlassian support. Third, allow only VPN to your site if it's not needed on the public internet.

Thanks,

Ben 

[Goran Nikolić]

Thanks @Benjamin, your answers are much appreciated.

Https is in place and I already removed public Internet access to this sites. Currently we do not have active Atlassian support, is there a safe way to do the upgrade to the latest versions without it?

[Benjamin]

You welcome.

The safe way would be to upgrade on a test system prior to upgrading production. However, it is highly recommended you have Active Atlassian support.