IBM Verify

IBM Verify

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  sslproxy Jct

    Posted Wed November 20, 2019 06:55 AM
    Hello Community,

    I wonder what is the difference in WebSEAL behavior choosing a proxy jct or just a ssl jct. I couldn't find any explanation on that but a proxy junction should be used in case of a proxy in front of the application server.

    Does anybody has a link to some documentation?

    thx,
    Jens

    ------------------------------
    Jens Petersen
    ------------------------------


  • 2.  RE: sslproxy Jct

    Posted Thu November 21, 2019 08:06 AM
    I join the question above and also the difference between tcp and tcpproxy is not clear

    ------------------------------
    Igor Vinogradov
    ------------------------------



  • 3.  RE: sslproxy Jct

    Posted Thu November 21, 2019 03:26 PM
    I join as well.

    ------------------------------
    Stacey Moore
    ------------------------------



  • 4.  RE: sslproxy Jct

    Posted Thu November 21, 2019 04:33 PM
    Hi Jens,

    we use sslproxy junctions to connect from our on-prem ISAM to Services that are located in Cloud (over Internet).  Because of security restriction outbound connection must go via proxy in our case. Compare picture here: https://www.ibm.com/support/knowledgecenter/SSPREK_9.0.7/com.ibm.isam.doc/wrp_config/concept/con_tcp_ssl_proxy_jct.html .

    This is kind of legacy method, today we use SAML or OIDC for this use cases.

    ------------------------------
    Jürgen Hitt
    ------------------------------