The settings mentioned here are recommended for using Apache Tomcat and Smart Materials Web in public facing / cloud based environments, especially for Smart Materials Portal.
For further details and information see
https://tomcat.apache.org/tomcat-9.0-doc/security-howto.html