If Business Activity Monitoring (BAM) is implemented on WebSphere, you should disable the serveServletsByClassnameEnabled property to prevent accessing servlets directly.
In the WebSphere administrator console, select Servers > Server Types > WebSphere Application Servers > server_name > Web Container settings > Web Container.
Under Additional Properties, click Custom Properties.
Click New.
In the Name field, specify serveServletsByClassnameEnabled.
In the Value field, specify false.
Click OK.
Click Save directly to master configuration.
Restart the WebSphere server.
Additional information
See IBM WebSphere documentation.
Twitter™ and Facebook posts are not covered under the terms of Creative Commons.
