Extended Network Connectivity (ENC) › Introduction to Extended Network Connectivity

Introduction to Extended Network Connectivity

CA IT Client Manager (CA ITCM) provides the Extended Network Connectivity (ENC) feature that allows DSM components and services to establish connections between end points that are

• Behind personal or network firewalls
• In different IP address spaces

ENC provides a virtual network environment where you can create connections between different DSM components that are all operating behind different firewalls or DMZs (demilitarized zones). This includes enterprise managers, domain managers, GUI, scalability servers, and agents.

Important! ENC can be used only by authorized, authenticated applications to connect to specific end points that already have ENC-enabled applications installed for very specific purposes. ENC does not provide a general channel through the firewall that can be used by other applications.

If two computers want to connect but cannot normally do so because of a firewall in the way, ENC arranges for both computers to connect to a third computer (ENC Router) that relays data between the two computers.

The ENC Gateway provides secure connections through firewalls by requiring the following:

• All connections through the ENC Gateway virtual network must be correctly authenticated by means of certificates.
• All connections must be correctly authorized. The authorization rules are set by policy and configure who can connect to whom at what time and for what operation. This is especially important when connecting across the public network or an internet.
• All connection attempts and other operations can be audited for security and troubleshooting purposes.