Symantec Access Management

Expand all | Collapse all

TechTip: Can we use relative forward proxy rule setting in CA Access Gateway - SPS ?

  • 1.  TechTip: Can we use relative forward proxy rule setting in CA Access Gateway - SPS ?

    Posted Apr 05, 2017 05:07 AM

    Question

    Can I use relative forward proxy rule setting in CA Access Gateway - SPS ?

    I'd like to configure it as relative to proxy the request to same SPS. I'd like to put it that way :

    <nete:case value="/xyz.htm">
    <nete:forward>/xyz.htm</nete:forward>
    </nete:case>

     

    Answer

    You can not use a relative target and you have to specify a host.

     

    If you want to use the nete:forward clause, you do need to specify a Host Destination Target (FQDN)

     

    ie :

     

    <nete:case value="/xyz.htm">
    <nete:forward>http://myhost.mydomain.com/xyz.htm</nete:forward>
    </nete:case>

     


    The forward clause uses a redirect 302 which returns a Location header to the client,
    and as such, the FQDN of the host need to be defined as stated by the RFI rfc2616
    section-14.30 :

     

       For 3xx responses, the location SHOULD indicate the
       server's preferred URI for automatic redirection to the resource. The
       field value consists of a single absolute URI.

     

           Location       = "Location" ":" absoluteURI

     

    https://tools.ietf.org/html/rfc2616#section-14.30

    Additional Information



  • 2.  Re: TechTip: Can we use relative forward proxy rule setting in CA Access Gateway - SPS ?

     
    Posted Apr 05, 2017 02:38 PM

    Thanks for sharing this tech tip with the community Julien!

    TechTip: Can we use relative forward proxy rule setting in CA Access Gateway - SPS ?