Table Of Contents - Novell ACCESS MANAGER 3.1 SP2 - ACCESS GATEWAY GUIDE 2010 Manual

Contents
About This Guide
1 Configuring the Access Gateway to Protect Web Resources
1.1 Managing Reverse Proxies and Authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14
1.1.1 Creating a Proxy Service . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
1.1.2 Configuring a Proxy Service . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19
1.1.3 Configuring Advanced Options for a Domain-Based Proxy Service . . . . . . . . . . . . . 21
1.2 Configuring the Web Servers of a Proxy Service . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22
1.3 Configuring Protected Resources . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24
1.3.1 Setting Up a Protected Resource . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25
1.3.2 Configuring an Authentication Procedure for Non-Redirected Login . . . . . . . . . . . . . 29
1.3.3 Assigning an Authorization Policy to a Protected Resource . . . . . . . . . . . . . . . . . . . 31
1.3.4 Assigning an Identity Injection Policy to a Protected Resource . . . . . . . . . . . . . . . . . 32
1.3.5 Assigning a Form Fill Policy to a Protected Resource . . . . . . . . . . . . . . . . . . . . . . . . 33
1.3.6 Assigning a Timeout Per Protected Resource . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35
1.3.7 Assigning a Policy to Multiple Protected Resources . . . . . . . . . . . . . . . . . . . . . . . . . 37
1.4 Configuring Protected Resources for Specific Applications . . . . . . . . . . . . . . . . . . . . . . . . . . . 38
1.4.1 Configuring Protected Resource for a SharePoint Server . . . . . . . . . . . . . . . . . . . . 38
1.4.2 Configuring a Protected Resource for a SharePoint Server with an ADFS Server . . 39
1.4.3 Configuring a Protected Resource for Outlook Web Access . . . . . . . . . . . . . . . . . . . 42
1.4.4 Configuring a Protected Resource for a Novell Teaming 2.0 Server . . . . . . . . . . . . . 44
1.5 Configuring HTML Rewriting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49
1.5.1 Understanding the Rewriting Process . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49
1.5.2 Specifying the DNS Names to Rewrite . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51
1.5.3 Defining the Requirements for the Rewriter Profile . . . . . . . . . . . . . . . . . . . . . . . . . . 54
1.5.4 Configuring the HTML Rewriter and Profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61
1.5.5 Creating or Modifying a Rewriter Profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 64
1.5.6 Disabling the Rewriter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 67
1.6 Configuring Connection and Session Limits . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 69
1.6.1 Configuring TCP Listen Options for Clients . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 69
1.6.2 Configuring TCP Connect Options for Web Servers . . . . . . . . . . . . . . . . . . . . . . . . . 70
1.6.3 Configuring Connection and Session Persistence. . . . . . . . . . . . . . . . . . . . . . . . . . . 72
2 Server Configuration Settings
2.1 Configuration Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 73
2.2 Saving, Applying, or Canceling Configuration Changes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 75
2.3 Managing Access Gateways . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 76
2.3.1 Viewing and Updating the Configuration Status . . . . . . . . . . . . . . . . . . . . . . . . . . . . 79
2.3.2 Scheduling a Command . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 81
2.4 Managing General Details of the Access Gateway . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 81
2.4.1 Changing the Name of an Access Gateway and Modifying Other Server Details . . . 82
2.4.2 Upgrading the Access Gateway Software . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 83
2.4.3 Exporting and Importing an Access Gateway Configuration . . . . . . . . . . . . . . . . . . . 83
2.5 Setting Up a Tunnel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 88
2.6 Setting the Date and Time . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 90
2.7 Customizing Error Pages on the Access Gateway Appliance . . . . . . . . . . . . . . . . . . . . . . . . . 91
2.7.1 Customizing the Error Pages by Using the Default Template . . . . . . . . . . . . . . . . . . 92
2.7.2 Customizing and Localizing Error Messages. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 93
2.8 Customizing the Error Pages of the Access Gateway Service. . . . . . . . . . . . . . . . . . . . . . . . . 95
11
13
73
Contents 5