Agent Type

Choose the agent type from the drop-down menu:

• Webgate

Cancel

Click Cancel to cancel the changes made to the page.

Next

Click Next to continue to register and configure the agent.

Name

The unique identifying name for this Agent registration. This is often the name of the computer that is hosting the Web server used by the WebGate.

A unique identifying name for each Agent registration is preferred, However:

• If the Agent Name exists, no error occurs and the registration does not fail. Instead, Access Manager creates the policies if they are not already in place.

• If the host identifier exists, the unique Agent Base URL is added to the existing host identifier and registration proceeds.

Description

Type a short meaningful description for this Agent registration.

Base URL

The host and port of the computer on which the Web server for the WebGate is installed.

For example: http://example_host:port or https://example_host:port, the port number is optional.

Note:A particular Base URL can be registered once only. There is a one-to-one mapping from this Base URL to the Web server domain on which the WebGate is installed (as specified with the Host identifier element). However, one domain can have multiple Base URLs.

Access Client Password

Unique password for this WebGate, which can be assigned during this registration process. This field is optional.

When a registered WebGate connects to an OAM Server, the password is used for authentication to prevent unauthorized WebGates from connecting to OAM Servers and obtaining policy information.

Host Identifier

This identifier represents the Web server host. This is automatically seeded with the value in the agent name field.

Note: You can register multiple OAM WebGates (or Access Clients) under a single host identifier with the same Application Domain and policies, as follows:

• When you register a WebGate, allow the process to create a host identifier (a name of your choice), and enable “Auto Create Policies".

• Register a second WebGate with the same host identifier as Step1, and clear the “Auto Create Policies" box to eliminate policy creation.

User Defined Parameters

Parameters you can enter to enable specific WebGate behaviors.

Security

Level of communication transport security between the Agent and the OAM Server (this must match the level specified for the OAM Server), choose any of the following:

• Open - No transport security.

• Simple - SSL v3/TLS v1.0 secure transport using dynamically generated session keys.

• Cert - SSL v3/TLS v1.0 secure transport using server side x.509 certificates. Choosing this option displays a field where you can enter the Agent Key Password.

Agent Key Password

The private key file (aaa_key.pem) is encrypted using DES algorithm. The Agent Key Password is saved in obfuscated format in password.xml and is required by the server to generate password.xml. However, this password is not retained by the server.

Note: When editing an webGate registration, password.xml is updated only when the mode is changed from Open to Cert or Simple to Cert. In Cert mode, once generated, password.xml cannot be updated. Editing the Agent Key Password does not result in creation of a new password.xml.

Virtual host

Check the box if you have installed a WebGate on a Web server that contains multiple Web site and domain names. The WebGate must reside in a location that enables it to protect all of the Web sites on that server.

Auto Create Policies

During agent registration, you can have authentication and authorization policies created automatically. This option is checked (enabled) by default.

Shared Registration and Policies: Multiple WebGates (or Access Clients) installed on different Web servers can share a single registration and policies to protect the same resources. This is useful in a high - availability fail over environment. To do this:

• WebGate1 - Register the first WebGate and enable Auto Create Policies to generate a host identifier and policies.

• WebGate2 - Register the second WebGate, specify the same host identifier as the first WebGate, and disable Auto Create Policies.

After registering the second agent, both WebGates use the same host identifier and policies.

IP Validation

Check the box to ensure a client's IP address is as the IP address stored in the ObSSOCookie generated for single sign-on. Selecting this option displays a field where you can enter the IP Validation Exceptions.

IP Validation Exceptions

Enter any IP addresses to be excluded from validation using standard notation for the addresses.

For Example: 10.20.30.123.

The IP address stored in the ObSSOCookie must match the client's IP address. Otherwise, the cookie is rejected and the user must re-authenticate.

Back

Click Back to move backwards in the Agent Registration wizard.

Finish

Click Finish to complete the registration.

Cancel

Click Cancel to cancel the changes made to the page.

Protected Resource List

URIs for the protected application, For Example: /myapp/login.

Each URI for the protected application should be specified in a new row of the table for the Protected Resource List.

Default URI: /**

The default matches any sequence of characters within zero or more intermediate levels spanning multiple directories.

Public Resource List

Each public application should be specified in a new row of the table for the Public Resource List.

Add

Add Protected Resources—Click Add button to add a resource to the Protected Resource list. Each URI should be specified in a new row of the table.

For Example: If you add /financial (and repeat to add /myfinancial) the following URLs are seeded into the designated policies of the Application Domain when Auto Create Policies is selected):

• /financial yields Resource URL /financial/**

• /myfinancial yields Resource URL /myfinancial/**

• /**

Add Public Resources— Click Add button to add a resource to the Public Resource List.

For Example: If you add /people the following URLs are included here and in the Application Domain (when Auto Create Policies is selected):

/people

Delete

Select a row and click Delete to remove the row.

Click to sort the items in the column in ascending order.

Click to sort the items in the column in descending order.