Previous Topic: Authentication Scheme Considerations

Next Topic: Avoiding Policy Conflicts with Destination Server Web Agents

Proxy-Specific WebAgent.conf Settings

A number of settings in the WebAgent.conf configuration files for Web Agents installed behind the DMZ in an enterprise have specific implications for the SPS.

The settings that must be modified in the destination server WebAgent.conf files include:

proxytrust

As an optimization, the proxytrust directive can be set on the destination server Web Agent sitting behind the SPS. Enter one of the following settings:

yes

The destination server web agent automatically trusts the authorizations made by the SPS.

no

The destination server web agent requests authentication every time. (Default)

proxytimeout

Instructs the Web Agent on the destination server to time out the single sign-on token used in requests made by the SPS. Enter a value in seconds.

Default: 120 seconds.