CA Access Gateway

CA Access Gateway is a scalable, manageable, and extensible stand-alone server that provides a proxy-based solution for access control. CA Access Gateway employs a proxy engine that provides a network gateway for the enterprise and supports multiple session schemes that do not rely on traditional cookie-based technology.

The embedded web agent enables Single Sign-On (SSO) across an enterprise. CA Access Gateway provides access control for HTTP and HTTPS requests and cookieless SSO. Also, the product stores session information in the in-memory session store. Proxy rules define how the CA Access Gateway forwards or redirects requests to resources located on destination servers within the enterprise.

By providing a single gateway for network resources, CA Access Gateway separates the corporate network and centralizes access control.

Note: SR-IOV interfaces (1/x and 10/x) that are part of a channel do not appear in the list of interfaces because channels are not supported on a CA Access Gateway instance. For more information about the features of CA Access Gateway, see the documentation for that product.

Provision a CA Access Gateway instance

Before you can provision a CA Access Gateway instance, you must download an XVA image. After you have downloaded the XVA image, upload it to the SDX appliance. Make sure you are using Management Service version 10.5 build 52.3.e or later on the SDX appliance. To provision a CA Access Gateway, first you need to upload the XVA image to the SDX appliance and then provision an instance.

To upload an XVA image to the SDX appliance:

1. On theConfigurationtab, navigate toCA Access Gateway>Software Images.
2. In the details pane, underXVA Files, from theActiondrop-down list, clickUpload.
3. In the dialog box that appears, clickBrowse, and then select the XVA file that you want to upload.
4. ClickUpload. The XVA file appears in theXVAFiles pane.

To provision a CA Access Gateway instance:

1. On theConfigurationtab, navigate toCA Access Gateway>Instances.
2. In the details pane, clickAdd.
3. In the Provision CA Access Gateway wizard, follow the instructions on the screen.
4. ClickFinish, and then clickClose.

After you provision the instance, log on to the instance and perform the detailed configuration.

To modify the values of the parameters of a provisioned instance, in the details pane, select the instance that you want to modify, and then clickModify. In the Modify CA Access Gateway wizard, set the parameters to values suitable for your environment.

Note:

If you modify any of the interface parameters or the name of the instance, the instance stops and restarts to put the change into effect.

Monitor a CA Access Gateway instance

The SDX appliance collects statistics, such as the version ofSDXToolsrunning on the instance, of a CA Access Gateway instance.

To view the statistics related to a CA Access Gateway instance:

1. Navigate toCA Access Gateway > Instances.
2. In the details pane, click the arrow next to the name of the instance.

Manage a CA Access Gateway instance

You can start, stop, restart, force stop, or force restart a CA Access Gateway instance from the Management Service. To complete these tasks, follow these steps:

1. On theConfigurationtab, expandCA Access Gateway.
2. Navigate toCA Access Gateway > Instances.
3. In the details pane, select the instance on which you want to perform the operation, and then select one of the following options:
   • Start
   • Shut Down
   • Reboot
   • Force Shutdown
   • Force Reboot
4. In the Confirm message box, clickYes.