Layer7 Access Management

Tech Tip : CA Single Sign-On : Is Siteminder webagent 12.52 SP1 officially compatible and supported with SM Policy Server 12.7 ?

  • 1.  Tech Tip : CA Single Sign-On : Is Siteminder webagent 12.52 SP1 officially compatible and supported with SM Policy Server 12.7 ?

    Posted 01-25-2018 06:45 AM

    Question:

     

    We're thinking to upgrade our environment, and we have some questions about support of Web Agent 12.52SP1 with Policy Server 12.7.

     

    1 - Is Siteminder webagent 12.52 SP1 officially compatible and

    supported with SM Policy Server 12.7 ?

     

    2 - When does Siteminder webagent 12.52 go out-of-support?

     

    3 - What is the official webagent replacement for webagent 12.52 (if

    it runs out-of-support)? Is there going to be a new version?

     

    Answer:

     

    1 - Yes, Web Agent 12.52SP1 is compatible with Policy Server 12.7 as

    stated by our Support Matrix :

     

    PRODUCT SUPPORT MATRIX CA Single Sign - On 12.7

    https://support.ca.com/phpdocs/7/5262/5262-12-7-platform-support-matrix.pdf

     

    4 CA Security Cross Product Compatibility

    4.1 Policy Server and Agents Compatibility CA Single Sign - On Policy

    Server 12.7 supports previous versions of Agents and Access Gateways

    (previously called Secure Proxy Server) with the following caveats:

     

    Any 6.x versions of Web Agents, Access Gateways (previously called

    Secure Proxy Server), ERP Agents, ASA Agents, and 5.x versions of ERP

    Agents that are not beyond their end-of-service date do not support

    IPv6 or FIPS Mode (and can only connect to 12.7 Policy Server in FIPS

    Compatibility Mode).

     

    2 - Web Agent 12.52 has no date so far. Check regularly the latest

    Support Matrix for compatibility.

     

    From the following page, you'll see the date of February 28, 2019

    for 12.52, but if you follow the link, you'll notice that concerns

    only those components and not the Web Agent :

     

    Policy Server

    Administration application/UI

    Policy Server SDK (Policy Server APIs only)

    CA Single Sign-On Access Gateway (previously Secure Proxy Server)

    CA Single Sign-On Advanced Password Services

     

    CA Single Sign-On (formerly CA SiteMinder) Release and Support Lifecycle Dates

    https://support.ca.com/us/product-content/status/support-life-cycle/indexes/ca-single-sign-on-release-and-support-lifecycle-dates.html

     

    Note that "Pure Java Agent API" is "Agent API" and not "Policy

    Server API" as mentioned in the above. So as long as you don't

    manage the Policy Store data with the SDK Policy Server API, so

    you get support.

     

    3 - The replacement is to move to CA Access Gateway (SPS) which in the

    latest version includes Web Agent Option Pack and SessionLinker among

    the others.

     

    KB : TEC1058757