You should be aware of additional security concerns if you have an Endeca Server cluster deployment instead of a single-machine Endeca Server deployment.
An Endeca Server cluster is a deployment of a cluster of multiple Endeca Server instances that host and manage multiple data domains. Details on this type of environment are provided in the Oracle Endeca Server Cluster Guide.
One major security consideration in an Endeca Serve cluster is that all Dgraph nodes in the same data domain utilize the same index files residing on a shared storage drive. In addition, the Endeca Server cluster state is also maintained in the shared file system by the Cluster Coordinator.
These files should be owned by the user ID that is running the WebLogic process. That user ID should have full access to the directory and files, while everyone else can have no access. For example, on a Linux system, you can set permissions on the topmost directory to 700.
Because the Endeca Server cluster will run across multiple machines, you should ensure that communications channels between the machines are secure, and that each machine itself is secure.