Novell ACCESS MANAGER 3.1 SP1 - GATEWAY GUIDE Manual page 13

addresses and TCP ports. For example, if you have a reverse proxy named
reverse proxy named
library
.
corporate
Protected resource names need to be unique to the proxy service, but they don't need to be unique to
the Access Gateway because they are always accessed through their proxy service. For example, if
you have a proxy service named
protected resource named
The first reverse proxy and proxy service you create is automatically assigned to be the
authenticating proxy.
1 In the Administration Console, click Devices > Access Gateways > Edit
The Edit link is either for a single Access Gateway or for a cluster of Access Gateways.
2 Click Reverse Proxy / Authentication.
3 Configure the authentication settings.
Identity Server Cluster: Specifies the Identity Server you want the Access Gateway to trust
for authentication. Select the configuration you have assigned to the Identity Server.
Whenever an Identity Server is assigned to a new trust relationship, the Identity Server needs to
be updated. This process is explained following the step that saves this configuration setting
(see Step 5 on page 17
4 (Optional) Configure the proxy settings.
Use the options in this section to control how all reverse proxies handle the security issues
involving secure cookies and the Via header
Force Secure Cookies: Forces the Access Gateway to set the secure keyword for the proxy
authentication cookie, regardless of whether the services hosted are all based on HTTPS. You
should enable this option for either of the following conditions:
All services that require the proxy authentication cookie (such as identity based policies)
are hosted as HTTPS services
An SSL accelerator, such as the Cisco* SSL accelerator, is placed between the Access
Gateway and the browsers and the browser receives only HTTPS links.
, only one of these reverse proxies can have a proxy service named
and a proxy service named
account
.
public
and Step 6 on page 17).
Configuring the Access Gateway to Protect Web Resources
and another
products
, they both can have a
sales
13