topic Re: Security of Mobile OneAgent and beacon endpoint in Real User Monitoring

Security of Mobile OneAgent and beacon endpoint

JB — Fri, 29 Jul 2022 20:54:19 GMT

Hi all,

I have a client that is concerned that a malicious party may decompile the mobile app and extract the application id and beacon endpoint for future attacks.

I found in the documentation the use of Beacon origins for CORS. Can you confirm if this also applied for mobile and if this should be the solution to be sure that the beacon endpoint will only accept requests from "known" or "authenticated" clients?

Thank you in advance.

Johanna.

Re: Security of Mobile OneAgent and beacon endpoint

Patrick_H — Mon, 01 Aug 2022 05:40:30 GMT

For detailed security inquiries I suggest to create a support ticket. CORS only applies for browser based traffic and not for native mobile agents.

Re: Security of Mobile OneAgent and beacon endpoint

JB — Mon, 08 Aug 2022 14:20:38 GMT

Thank you harp.