Creating secure proxy profiles
You can create a secure proxy profile to serve as the initial point of entry into your enterprise environment. Typically, a secure proxy server exists in the demilitarized zone (DMZ), accepts requests from clients on the Internet, and forwards the requests to servers in your enterprise environment.
Before you begin
Before you use the Profile Management Tool, install the core product files. You can create two different secure proxy profiles depending on which core product files you install. The core product files could either be for a WebSphere® Application Server Network Deployment installation or a DMZ Secure Proxy Server installation.
Read about the profiles created for the different installations in About this task.
The Profile Management Tool is the graphical user interface for the manageprofiles command. See the description of the manageprofiles command for more information.
You must provide enough system temporary space to create a profile. For information, read about the file system requirements for profiles.
Eclipse*spacing:0
Eclipse*fontList:-misc-fixed-medium-r-normal-*-10-100-75-75-c-60-iso8859-1
After
adding the lines, run the following command before launching the Profile Management Tool:
xrdb -load user_home/.Xdefaults
About this task
After installing the core product files for the product, you must create a profile. This procedure describes creating a secure proxy profile using the graphical user interface that is provided by the Profile Management Tool. You can also use the manageprofiles command to create a secure proxy profile.
You can create profiles with the Profile Management Tool using the typical profile creation process or the advanced profile creation process. The typical profile creation process uses default settings and assigns unique port values. You can optionally set values as allowed. For the advanced profile creation process you can accept the default values, or specify your own values.
You can create two different profiles for the DMZ Secure Proxy Server using this task. You can create a secure proxy server profile on a WebSphere Application Server Network Deployment installation. However, you can only configure this profile in a WebSphere Application Server Network Deployment installation. To use the secure proxy server of the profile, you must export the profile from the WebSphere Application Server Network Deployment environment and then import it into the DMZ Secure Proxy Server installation. Read about exporting and importing the secure proxy profile in the topic about the ConfigArchiveOperations command group for the AdminTask object. Alternatively, you can create a secure proxy server profile on a DMZ Secure Proxy Server installation. In this situation the secure proxy server does not have a web container, and so cannot host an administrative console. To administer this secure proxy server, you must employ wsadmin scripting commands.
Procedure
Results
Depending on your installation, you have either created a secure proxy server profile on a WebSphere Application Server Network Deployment image or a secure proxy profile on a DMZ Secure Proxy Server installation.
Refer to the description of the manageprofiles command to learn about creating a profile using a command instead of the Profile Management Tool.
What to do next
The secure proxy server can accept requests from clients on the Internet and forward the requests to servers in your enterprise environment.
The secure proxy profile is available both on the WebSphere Application Server Network Deployment and the DMZ images. You cannot start the profile on the WebSphere Application Server Network Deployment image. The profile is used only for configuration on an administrative console. After you configure the profile, you can export it and then import it into the secure proxy profile of the DMZ image. The secure proxy profile is fully operational on the DMZ image.