Installation Guides › Implementation Guide › SOA Security Manager Introduction › SOA Security Manager Overview › SOA Security Manager Architecture and Components › SOA Security Gateway

SOA Security Gateway

The CA SOA Security Gateway is an XML gateway that manages XML traffic, protecting XML applications from malicious attack and from unauthorized access. Its XML Security Acceleration engine offloads security processing from web services applications and helps ensure optimum performance and throughput.

Note: The SOA Security Gateway requires a separate license in addition to the license for SOA Security Manager. To obtain the CA SOA Security Gateway license, contact the CA Licensing Group.

A SOA Security Gateway deployment includes the following components:

• SOA Security Gateway
• SOA Security Gateway Management Console

Policies can be stored in an XML file, a directory server, a relational database, or an XML database. The SOA Security Gateway Configuration Manager acts as the sole interface to the underlying policy storage system.

The SOA Security Gateway also provides SOA Agent functionality, allowing it to authenticate and authorize XML requests against the SOA Security Manager Policy Server.

Note: When planning and implementing SOA Security Manager security policies, consider the SOA Security Gateway as being the functional equivalent of a SOA Agent. Unless otherwise noted, diagrams and descriptions in this guide that refer to a SOA Agent also apply to the SOA Security Gateway.