Supported Web Reverse Proxy functionality

The IBM Security Verify Access appliance Web Reverse Proxy functionality is based on the technology included with the IBM Security Verify Access WebSEAL product. The appliance supports the majority of features that are offered by WebSEAL, with the exception of the items contained in the following table:

Table 1. WebSEAL features that the appliance does not support
Feature Description
Custom libraries, including CDAS and EAS The appliance does not support custom CDAS modules. As a result, the appliance does not support the following authentication mechanisms:
  • IP address
  • HTTP header
  • Post password change
WebSEAL does not provide CDAS modules for these mechanisms.
Note: The appliance does support the IBM Security Identity Manager Password Synchronization Plug-in. For more information, see the [itim] stanza in the Stanza Reference topics in the Knowledge Center.
Local junctions The following limitations apply to local junction support on the appliance:
  • The appliance can support a single fixed file system path for the local junction of a WebSEAL instance.
  • Local junctions on the appliance cannot execute any CGI scripts.
Application Response Measurement (ARM)

WebSEAL software includes support for ARM to monitor transactions throughout the request and response processing stream. The appliance does not include ARM support.

Tivoli® Common Directory Logging The Tivoli Common Directory Logging feature stores all log files for IBM Security software applications in a common file system directory. The appliance does not support this common logging. Logging for the appliance is managed through the LMI.
Auditing to a pipe or CARS The appliance cannot send audit records directly to a pipe or a CARS server. It can however, use an intermediate Verify Access authorization server to indirectly send audit records to the destinations.
ARS (web service) The IBM Security Verify Access for Web ARS web service can send request information to an external ARS server for authorization. ARS is not available on the appliance.