Question:
We're thinking to upgrade our environment, and we have some questions about support of Web Agent 12.52SP1 with Policy Server 12.7.
1 - Is Siteminder webagent 12.52 SP1 officially compatible and
supported with SM Policy Server 12.7 ?
2 - When does Siteminder webagent 12.52 go out-of-support?
3 - What is the official webagent replacement for webagent 12.52 (if
it runs out-of-support)? Is there going to be a new version?
Answer:
1 - Yes, Web Agent 12.52SP1 is compatible with Policy Server 12.7 as
stated by our Support Matrix :
PRODUCT SUPPORT MATRIX CA Single Sign - On 12.7
https://support.ca.com/phpdocs/7/5262/5262-12-7-platform-support-matrix.pdf
4 CA Security Cross Product Compatibility
4.1 Policy Server and Agents Compatibility CA Single Sign - On Policy
Server 12.7 supports previous versions of Agents and Access Gateways
(previously called Secure Proxy Server) with the following caveats:
Any 6.x versions of Web Agents, Access Gateways (previously called
Secure Proxy Server), ERP Agents, ASA Agents, and 5.x versions of ERP
Agents that are not beyond their end-of-service date do not support
IPv6 or FIPS Mode (and can only connect to 12.7 Policy Server in FIPS
Compatibility Mode).
2 - Web Agent 12.52 has no date so far. Check regularly the latest
Support Matrix for compatibility.
From the following page, you'll see the date of February 28, 2019
for 12.52, but if you follow the link, you'll notice that concerns
only those components and not the Web Agent :
Policy Server
Administration application/UI
Policy Server SDK (Policy Server APIs only)
CA Single Sign-On Access Gateway (previously Secure Proxy Server)
CA Single Sign-On Advanced Password Services
CA Single Sign-On (formerly CA SiteMinder) Release and Support Lifecycle Dates
https://support.ca.com/us/product-content/status/support-life-cycle/indexes/ca-single-sign-on-release-and-support-lifecycle-dates.html
Note that "Pure Java Agent API" is "Agent API" and not "Policy
Server API" as mentioned in the above. So as long as you don't
manage the Policy Store data with the SDK Policy Server API, so
you get support.
3 - The replacement is to move to CA Access Gateway (SPS) which in the
latest version includes Web Agent Option Pack and SessionLinker among
the others.
KB : TEC1058757