[Type the company name]

Microsoft IAG SSLVPN Project - Design Document [Template]

 

 

Num

Author

Date

Document Version

Changes

1

Idan Plotnik

10/28/2008

V 0.1

Document Creation

2

3

4

Num

Author

Date

Document Version

Changes

1

Idan Plotnik

10/28/2008

V 0.1

Document Creation

2

3

4

Trunk Name:

[Fill in the name of the trunk]

Advanced Trunk Configuration

General

Web Logging

Include Username in Log

Disable

Include Username in Log

Grade out

Debugging

Debug Mode

Disabled

Trunk Name:

Advanced Trunk Configuration

Authentication

Authentication User On Session Login

Select Authentication Servers

Users Selects From a List of Servers

Show Servers Names

User Must Provide Credentials On-the-Fly

Use the Same User Name

Enable Users to Add Credentials for Each Selected Server

Enable Users to Change Their Passwords

Notify User X Days Prior to Expatriation

Enable Users to Manage Their Credentials

Enable Users to Select Language

Skip client compliance checks when accessing a SharePoint site outside of a session

Login Page:

Login.asp

On-the-Fly Login Page:

Login.asp

Permitted Authentication Attempts:

3

Block Period:

0

Logoff Scheme

Logoff URL:

/InternalSite/LogoffMsg.asp

Logoff Message:

/InternalSite/LogoffMsg.asp

WaitX Sec After Logoff URL to Terminate Session

30

Pass the Logoff to the Application Server

Send Logoff Response to the Browser

Trunk Name:

Advanced Trunk Configuration

Session

Session Configuration

Max Concurrent Sessions:

10000

Concurrent Sessions Threshold:

0

Max Concurrent Unauthenticated Sessions Threshold:

0

Session Notification Timeout:

60

Error Message URL:

/InternalSite/InternalError.asp

Disable Component Installation and Activation

Disable Scripting Before Application Start

Use Endpoint Certification

Verify User Name Against Certificate

Attachment Wiper Cleans Application-Specific Temporary Files

Use DNS Suffix:

Bind Source IP to the Session

Endpoint Policies

Session Access Policy:

Default Session Access

Privileged Endpoint Policy:

Default Privileged Endpoint

Install Socket Forwarding Components Policy:

Always

Prompt User when Retrieving Information from Endpoint

Default Session Settings

Inactive Session Timeout (Seconds):

300

Automatic Scheduled Logoff After:

60 Minutes

Nullify Cookies on Logoff

Avoid Browser-Side Caching

Activate Attachment Wiper (ActiveX)

Prompt User to Disconnect Channel When Portal is Closed without Logoff

Re-open Portal if User Select to Keep Channel Open

Privileged Session Settings

Inactive Session Timeout (Seconds):

1800

Automatic Scheduled Logoff After:

1440

Nullify Cookies on Logoff

Avoid Browser-Side Caching

Activate Attachment Wiper (ActiveX)

Prompt User to Disconnect Channel When Portal is Closed without Logoff

Re-open Portal if User Select to Keep Channel Open

Endpoint Settings

Uninstall Socket Forwarding Component

Add Site to Pop-Up Blocker's Sites

Trunk Name:

Advanced Trunk Configuration

Application Customization

Enable Application Customization

Select Customized Temple:

Automatic

Other (Manual Configuration)

Search and Replace on Content-Type

text/.*

application/x-javascrip.*

Compression Handling in Responses

Support GZip Compression of Listed URL Extensions

Trunk Name:

Advanced Trunk Configuration

Application Access Portal

Skip Body Parsing

Don't parse the bodies of these request.

Server:

URLs:

Don't parse the bodies of the response to these requests.

Server:

URLs:

Manual URL Replacement

URL:

To URL:

Type:

Server Name:

Use SSL:

Port:

Search and Replace Response Content

Handle responses to requests for these URLs if not previously handled by a specific parser

Server:

URLs:

Trunk Name:

Advanced Trunk Configuration

URL Inspection

Valid Methods

Available Methods in the System

Methods in "DEFAULT" Group

This list is used by the URL Set when the Methods field is set to DEFAULT

URL Set Level

Type

Out-Of-The-Box Security Configuration

Type:

Legal Characters

Forbid Encoding of:

Include NULL:

Enable %u Encoding:

Check Global Out-Of-The-Box Rules

General Options

Max Post/Put Data:

-1

Block "Negotiate" Authorization Header

Trunk Name:

Advanced Trunk Configuration

Global URL Settings

The following parameter list is automatically added to each rule configured in the URL List

Global Parameter List

Name:

Nam Type:

Value:

Value Type:

Length:

Existence:

Rejected Values

Reject the request if a parameter value matches any of the following regular expressions:

URL Settings

Download URLs:

Type:

URL:

Method:

Upload URLs:

Type:

URL:

Method:

Check Content:

Check Parameters:

 

Parameter name:

 

Parameter Value:

 

Check Value:

Restricted Zone URLs:

Ignore Requests in Timeout Calculations:

Type:

URL:

Method:

Trunk Name:

Advanced Trunk Configuration

URL Set

URL List

Num:

Name:

Action:

URL:

Parameters:

Note:

Methods:

All Other URLs Will Be Rejected

Parameter List

Num:

Name:

Name Type:

Value:

Value Type:

Length:

Existence:

Unlisted Parameters:

Reject

Accept

Max Name Length:

-1

Max Value Length:

-1

Allowed Occurrences:

Multiple

Max Total Length:

-1

Rejected Values Checking:

On

Export

Import