Video Gaming Accessories User Manual

ManualsBrandsRSA Security ManualsVideo Gaming AccessoriesAG-600 V3.0.2

RSA ClearTrust Ready Implementation Guide

For Portal Servers and Web-Based Applications

Last Modified August 30, 2004

1. Partner Information

Partner Name AEP Systems Ltd.

Web Site www.aepsystems.com

Product Name AEP SureWare A-Gate

Version & Platform AG-600 V3.0.2

Product Description AEP SureWare A-Gate, a suite of SSL VPN hardware appliances,

provides a high functionality, low-cost SSL VPN solution for small and

medium enterprises (SMEs) that want to extend enterprise

applications to employees, business partners and customers.

AEP SureWare A-Gate provides a full-featured solution that meets all

the remote access needs of SMEs, from access to Web-enabled or

Windows Terminal Services applications to full access to client-server

applications. Now all remote access users - mobile employees, "road

warriors", teleworkers, occasional travelers and business partners -

can have secure and authenticated access to internal applications and

resources.

Product Category Remote access, Virtual Private Networking

Laptop

RSA ClearTrust

Web Server

Active Directory

AEP SureWare A-Gate

1. User logs in to AEP SureWare A-Gate

2. SureW are A-Gate authenticates user against LDAP repository

3. SureW are A-Gate forwards credentials to requested web server

4. Requested web server passes credentials to ClearTrust server

5. ClearTrust server verifies credentials against LDAP repository

6. ClearTrust server authorises request

7. Web server sends requested page to SureWare A-Gate

8. SureW are A-Gate delivers requested page to user

Page: 1

Summary of content (11 pages)

PAGE 1
RSA ClearTrust Ready Implementation Guide For Portal Servers and Web-Based Applications Last Modified August 30, 2004 1. Partner Information Partner Name Web Site Product Name Version & Platform Product Description AEP Systems Ltd. www.aepsystems.com AEP SureWare A-Gate AG-600 V3.0.
PAGE 2
. Contact Information Email Phone Web Sales contact sales@aepsystems.com Support Contact support@aepsystems.com US/Toll Free: 800.383.7716 US/California: 650.326.6748 US/Boston: 617.790.5825 Ireland: (+353 1) 204 1300 UK: (+44) 1442 458 600 US/Toll Free: 866.443.0370 EMEA: (+353 1) 204 1300 www.aepsystems.com www.aepsystems.com 3.
PAGE 3
4. Integration Overview AEP SureWare A-Gate provides Single-Sign-On via Authentication Forwarding Rules. These rules list the servers protected by RSA ClearTrust and ensure that when a user attempts to access a resource on one of these servers, their Basic credentials are automatically forwarded with the request. 5. Product Requirements Hardware requirements Component Name: SureWare A-Gate AG-600 Firmware level 3.0.2.
PAGE 4
6. Product Configuration To enable SSO perform the following steps: • Add all ClearTrust protected servers to the ‘Anywhere Web Servers’ list via the A-Gate web administration interface. • Set the HTTPS default policy to Allow. • Configure the A-Gate to use the same LDAP repository as the RSA ClearTrust environment. Active Directory User Management can be performed either by the RSA ClearTrust AdminGUI or directly in the LDAP directory server. • Enable LDAP Authentication.
PAGE 5
2. Set HTTPS default policy to ‘Allow’. By default, HTTPS default access policy is set to ‘Deny’, which ensures the administrator starts configuration with a secure, locked down A-Gate, where all HTTPS access requests are rejected. There are two ways to allow access to A-Gate’s back-end servers. The quickest way is to set the default HTTPS policy to ‘Allow’. The other, more controlled way is to create HTTPS ACLs. Please consult the reference manual for information on ACLs.
PAGE 6
3. Configure LDAP Repository • Navigate to ‘Network > LDAP Configuration’. • Add the Active Directory server by entering the IP address or hostname in the ‘Server:’ field of the ‘Add LDAP Server’ section. • Click ‘Add’. • Configure the LDAP search base (mandatory) and optionally the LDAP bind DN and password. • Click ‘Apply’.
PAGE 7
4. Enable LDAP Authentication • Navigate to ‘Remote Access > User Authentication > Authentication Mechanisms’ and select ‘Enable’ LDAP Authentication. • Ensure all other authentication mechanisms are disabled. • Click ‘Apply’. • Navigate to ‘Remote Access > User Authentication > Authentication Mechanisms > LDAP Authentication. • Set the ‘LDAP Login Attribute’, this should be ‘sAMAccountName’ for Active Directory. • Click ‘Apply’.
PAGE 8
5. Create Authentication Forwards Single-Sign-On is achieved in the SureWare A-Gate via Authentication Forwards. This is the process whereby Basic credentials are automatically forwarded to back-end servers when requesting particular resources. To enable this process, the administrator must create at least one Authentication Forward, consisting of a name, credentials and a list of forwarding rules which state what resources are governed by this Authentication Forward.
PAGE 9
top of the page where it can be edited, deleted or re-ordered. Rule order is extremely important as the A-Gate always applies the first matching rule it encounters.
PAGE 10
• Click on the newly created Authentication Forward to add forwarding rules. • Each rule consists of a rule type, a match type and a match string. Rule Type indicates whether authentication forwarding is allowed, denied or required for matching resources. Match Type indicates the comparison mechanism used for this rule. Possible values are ‘Compare’ which looks for an exact match, ‘RegEx’ which matches against a regular expression or ‘Any’, which matches everything.
PAGE 11
7. Certification Checklist for Portal Servers and Web-Based Apps Date Tested: August 18, 2004 Product Tested Version RSA ClearTrust RSA ClearTrust Agent AEP SureWare A-Gate 5.5 4.5 IIS 3.0.