Symantec Access Management

 View Only

 Access Gateway - port value in virtual host definition

Sicurezza Informatica's profile image
Sicurezza Informatica posted Sep 16, 2022 03:38 AM
Product: Access Gateway 12.8

Context: 2 applications reachable with similar URLs, i.e. same FQDN but different protocols and ports (this is because they share the same VIP of the application load-balancer)
http://app.dummy.com:8080/act
https://app.dummy.com:8443/act

Need: Each of the 2 applications must be protected by a specific ACO (Agent Configuration Object) because the two ACOs have different parameters that are not compatible with each other and therefore must remain separate, but we do not know how to configure the file ./secure-proxy/proxy-engine/conf/server.conf appropriately so that there are 2 distinct Virtual Hosts with the same hostname (app.dummy.com).
We thought to insert the port in the "hostnames" parameter value but it seems this syntax is not acceptable and generates an error:<VirtualHost name="app.dummy.com-insecure">

hostnames="app.dummy.com:8080"

enableproxypreservehost="yes"

<WebAgent>

sminitfile="/opt/CA-SPS/secure-proxy/proxy-engine/conf/defaultagent/WebAgent.conf"

</WebAgent>

</VirtualHost>
<VirtualHost name="app.dummy.com-secure">

hostnames="app.dummy.com:8443"

enableproxypreservehost="yes"

<WebAgent>

sminitfile="/opt/CA-SPS/secure-proxy/proxy-engine/conf/defaultagent/WebAgentSecure.conf"

</WebAgent>

</VirtualHost>
Could you help?
Kind regards,
Gabriele.