New Features and Enhancements

This release of IBM® Sterling Secure Proxy contains the following new features:

Base Release (v6.2.0.0)

To install this software, you should go to the Passport Advantage website and follow instructions described to complete the download. IBM Sterling Secure Proxy v6.2.0 and its related software have the following features and enhancements:

New Features and Enhancements
Support for SFTP Forward Proxy: Currently Sterling Secure Proxy provides SFTP Reverse Proxy functionality which allows SFTP connections coming from trading partners (as client) to reach SFTP Servers in the secure zone. In this version, Sterling Secure Proxy provides SFTP Forward proxy functionality, which allows outbound connections to trading partner SFTP Servers from SFTP clients in secure zone. If you are using External Authentication functionality in your SSP Adapter, you must use IBM Sterling External Authentication Server v6.1.0.1 or higher to use the full SFTP Forward Proxy functionality. For more information, see SFTP Forward Proxy Configuration. Attention: Please note that you would need Secure Proxy Outbound or Premium license entitlements to access this feature. For more information on different IBM Sterling Secure Proxy licensing, refer to the Licensing Page. SAML 2.0 MFA/SSO support for login to Secure Proxy Configuration Manager (CM): IBM Sterling Secure Proxy (SSP) Configuration Manager (CM) now supports authentication with external SAML2.0 IdP. This allows support for multi-factor authentication for SSP CM, since IdPs typically can be configured for multi-factor authentication. To enable SAML 2.0 support, use Configuration Manager (CM) to define a new user which uses SSO for login to SSP CM console and change the relevant SSO Configuration. For more details on how to define the CM SSO configuration, see CM SSO Configuration. You must then use this SSO configuration object to create/modify a CM SSO user which uses this SSO configuration. Refer CM User Configuration to see the relevant parameters for using SAML IdP authentication. React based SSP CM Web Console: In this release, all the SSP CM capabilities have been moved from Classic Console to React based Web Console. Restructured multiple security configuration related objects based on new UI design. New REST APIs have been added for the following features: SSH Security Configuration SSL Configuration

Support for SFTP Forward Proxy:

Currently Sterling Secure Proxy provides SFTP Reverse Proxy functionality which allows SFTP connections coming from trading partners (as client) to reach SFTP Servers in the secure zone. In this version, Sterling Secure Proxy provides SFTP Forward proxy functionality, which allows outbound connections to trading partner SFTP Servers from SFTP clients in secure zone. If you are using External Authentication functionality in your SSP Adapter, you must use IBM Sterling External Authentication Server v6.1.0.1 or higher to use the full SFTP Forward Proxy functionality. For more information, see SFTP Forward Proxy Configuration.

Attention: Please note that you would need Secure Proxy Outbound or Premium license entitlements to access this feature. For more information on different IBM Sterling Secure Proxy licensing, refer to the Licensing Page.
SAML 2.0 MFA/SSO support for login to Secure Proxy Configuration Manager (CM):
IBM Sterling Secure Proxy (SSP) Configuration Manager (CM) now supports authentication with external SAML2.0 IdP. This allows support for multi-factor authentication for SSP CM, since IdPs typically can be configured for multi-factor authentication. To enable SAML 2.0 support, use Configuration Manager (CM) to define a new user which uses SSO for login to SSP CM console and change the relevant SSO Configuration. For more details on how to define the CM SSO configuration, see CM SSO Configuration. You must then use this SSO configuration object to create/modify a CM SSO user which uses this SSO configuration. Refer CM User Configuration to see the relevant parameters for using SAML IdP authentication.

React based SSP CM Web Console:
In this release, all the SSP CM capabilities have been moved from Classic Console to React based Web Console.
- Restructured multiple security configuration related objects based on new UI design.
- New REST APIs have been added for the following features:
  - SSH Security Configuration
  - SSL Configuration