How to create an SSL proxy policy

Adding an SSL proxy policy

How to add an SSL proxy policy to a user agent when requests require a secured connection.

About this task

Add an SSL proxy policy to secure the connection. The SSL proxy profile supports secure access to the HTTP proxy server. The SSL proxy profile must be either a client or two-way profile. If the target URL matches the expression, the connection uses the SSL proxy profile to secure the connection.

Procedure

1. In the search field, enter User Agent.
2. From the search results, click User Agent.
3. Click the name of a user agent configuration.
4. Click the SSL Proxy Profile Policy tab.
5. Add a policy.
   1. Click Add.
   2. In the URL Matching Expression field, enter a shell-style expression to be the matching pattern for the URL set.
   3. From the SSL Proxy Profile list, select the profile to support secure access to the HTTP proxy.
   4. Click Apply.
6. Optional: Repeat the previous step to add another policy.
7. Click Apply to save the changes to the running configuration.
8. Optional: Click Save Configuration to save the changes to the persisted configuration.

How to create a basic Authentication policy

A user agent request requires basic HTTP authentication (user name and password). If the target URL matches this expression, an HTTP Authorization header is added.

About this task

This header contains the supplied credentials. The URL set defined by this matching expression can be identical to the set defined by the HTTP proxy policy, or it can be a subset.

To establish a connection to a remote resource over FTP or SFTP with password authentication, configure a user agent with a basic authentication policy.

Procedure

1. In the search field, enter User Agent.
2. From the search results, click User Agent.
3. Click the name of a user agent configuration.
4. Click the Basic-Auth Policy tab.
5. Add a policy.
   1. Click Add.
   2. In the URL Matching Expression field, enter a shell-style expression to be the matching pattern for the URL set.
   3. Define credentials for authentication: User name and password
   4. Click Apply.

adding a header injection policy

Adding a header injection policy

Add a header injection policy to a user agent to inject an HTTP header (name-value pair) into a request to the remote server.

About this task

Several DataPower® services can also inject HTTP headers. The user agent operates on the request after the service.

Procedure

1. In the search field, enter User Agent.
2. From the search results, click User Agent.
3. Click the name of a user agent configuration.
4. Click the Inject Header Policy tab.
5. Add a policy.
   1. Click Add.
   2. In the URL Matching Expression field, enter a shell-style expression to be the matching pattern for the URL set.
   3. Define the header to inject: Header name and value.
   4. Click Apply.
6. Optional: Repeat the previous step to add another policy.
7. Click Apply to save the changes to the running configuration.
8. Optional: Click Save Configuration to save the changes to the persisted configuration.

SOA IIB Key Points

  IIB or WMB runtime uses the ports as below by default..

1)HTTP nodes use IIB NODE level ports where http connector starts with 7080 and https connector starts with 7083...

2)SOAP nodes use embedded/IBM integration server/EG level ports where http uses withing the ragne 7800 to 7842 and https uses from 7843 to 7884 etc..