The resolution can combine options if Tomcat and IIS are installed on the same system. For instance, you can use both option 2 and option 3 to restrict access to AJP . SBM 11.8 uses a version of Tomcat 8.5 that is not affected, but it still implements an AJP secret using the SBM Configurator > Security section.
