Secure Testing helps you define a secure test environment and build a robust B2B solution, based upon a configurable set of IP address and ranges. This functionality lets you match your Scene7 deployments with the architecture of your content management and commerce platform.
With Secure Testing, you can preview the staging version of the website with unpublished content.
You might prefer to create a staging environment rather than making assets publicly available for the following reasons:
Preview websites before public launch (staging website).
Serve assets that require restricted access, such as eCatalogs that show prices in a B2B web application.
Use assets behind a firewall as part of product information management system, customer service application, training site, and so on.
Secure Testing does not affect access to the Scene7 Publishing System. SPS security remains consistent and requires the usual credentials for access to SPS and related web services.
Most corporations run their Internet behind a firewall. Access to the Internet is possible through certain routes and typically through a limited range of public IP addresses.
From your corporate network, you can figure out your public IP address using websites like http://whatismyip.com or request this information from your corporate IT organization.
With the Secure Testing, Scene7 establishes a dedicated Image Server for staging environments or internal applications. Any request to this server checks the origin IP address. If the incoming request is not within the approved list of IP addresses, a failure response is returned. The Scene7 Company Administrator configures the approved list of IP addresses for their company’s Secure Testing environment.
Because the location of the original request must be confirmed, the traffic of the Secure Testing service is not routed through a content distribution network like public Scene7 Image Server traffic. Requests to the Secure Testing service might have a slightly higher latency compared to the public Scene7 Image Servers.
Unpublished assets are immediately available from the Secure Testing services, without the need to publish. This allows you to run a preview before assets are published to their public facing image server.
note: Secure Testing services leverage the Catalog Server that is configured with an internal publish context. Therefore, if your company is configured to publish to Secure Testing, be aware that any uploaded assets in Scene7 Publishing System immediately become available on Secure Testing services. This functionality is true regardless of whether or not the assets are marked for publish on upload.
Secure Testing services currently support the following asset types and functionalities:
Vignettes (Render Server requests).
Render Server requests (supported, but must be requested explicitly by customer).
Sets, including image sets, eCatalog, render sets, and media sets.
Standard Scene7 rich media viewers.
Scene7 OnDemand JSP pages.
Static content, such as PDF files and progressively served videos.
HTTP video streaming.
Progressive video streaming.
The following asset types and functionalities are currently not supported:
RTMP video streaming
Scene7 Info or eCatalog search
Public version: Link assets using your traditional Scene7 URL syntax
Staging version: Link assets using the same syntax but with the Secure Testing site name
Check whether assets are visible from within your corporate network.
From within the corporate network identified by the previously defined IP address range, the staging version of the website should display all images, whether marked for publish or not. This allows you to test without accidentally making images available before preview approval or product launch.
Confirm that the public version of your site shows published assets as previously experienced with Scene7.
From outside your corporate network, verify that nonpublished assets (that is, unmarked for publish) are protected from third-party access.
Access your network from outside (such as, from your home computer or over a 3G connection), then verify that the public version of the site shows all published assets but none of the unpublished content.
Confirm that the staging version does not show any asset because you are accessing the Secure Testing service from an unapproved IP address.