Installation

Is it ok to disable Splunk Secure Gateway?

fredclown
Contributor

We have a Splunk install inside a network that will never be publicly accessible in any way shape or form. Seeing as this is the case is it ok to disable the Splunk Secure Gateway app that comes pre-installed? Are there other reasons I should keep it turned on?

Labels (1)
0 Karma
1 Solution

burwell
SplunkTrust
SplunkTrust

We have been disabling it since it was enabled by default in a previous 8.x version. 

Note that in 9.x there's a bug with the config tracker and disabling an app. See the known issues SPL 233484. We ended up configuring the config tracker to ignore the secure gateway app that we disabled.

View solution in original post

burwell
SplunkTrust
SplunkTrust

We have been disabling it since it was enabled by default in a previous 8.x version. 

Note that in 9.x there's a bug with the config tracker and disabling an app. See the known issues SPL 233484. We ended up configuring the config tracker to ignore the secure gateway app that we disabled.

Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...