Configuring Ssl Communication With The Browsers And The Identity Server; Section 3.3, "Configuring Ssl Communication With The Browsers And The Identity Server - Novell ACCESS MANAGER 3.1 SP2 - ACCESS GATEWAY GUIDE 2010 Manual

3.3 Configuring SSL Communication with the
Browsers and the Identity Server
1 In the Administration Console, click Devices > Access Gateways > Edit > [Name of Reverse
Proxy].
2 Configure the reverse proxy for SSL by filling in the following fields:
Enable SSL with Embedded Service Provider: Select this option to encrypt the data
exchanged for authentication (the communication channel between the Identity Server and the
Access Gateway). This option is available only for the reverse proxy that has been assigned to
perform authentication.
If you enable SSL between the browsers and the Access Gateway, this option is automatically
selected for you. You can enable SSL with the Embedded Service Provider without enabling
SSL between the Access Gateway and the browsers. This allows the authentication and identity
information that the Access Gateway and the Identity Server exchange to use a secure channel,
but allows the data that the Access Gateways retrieves from the back-end Web servers and
sends to users to use a non-secure channel. This saves processing overhead if the data on the
Web servers is not sensitive.
Enable SSL between Browser and Access Gateway: Select this option to require SSL
connections between your clients and the Access Gateway. SSL must be configured between
the browsers and the Access Gateway before you can configure SSL between the Access
Gateway and the Web servers.
Redirect Requests from Non-Secure Port to Secure Port: Determines whether browsers are
redirected to the secure port and allowed to establish an SSL connection. If this option is not
selected, browsers that connect to the non-secure port are denied service.
This option is only available if you have selected Enable SSL with Embedded Service Provider.
112 Novell Access Manager 3.1 SP2 Access Gateway Guide