Tomcat Configuration

This section describes some Tomcat configuration settings that you are generally recommended to change before going into production:

Recommended Tomcat Security Settings

Disable Tomcat Session Persistence

Enable Protection Against Session Hijaking

Hide Session IDs

Enable Compression in Tomcat

Also see JVM Startup Recommendations for Java Virtual Machine (JVM) parameter settings for use with SuperWEB2 and Tomcat to optimise Java programs and program memory.