Symantec Access Management

Hi all,

Is it possible to run Siteminder Policy Servers on both the upgraded version (e.g. 12.6) and the older version (e.g. 12.5) of Policy Stores in a fail-over mode.

The upgraded 12.6 policy servers should primarily point to the 12.6 store and should fail-over to the 12.5 store in case of issues with the 12.6 stores.

Can the same be configured using the Data tab in management console by specifying the respective 12.6 and 12.5 Store IPs ?

Please suggest.

Regards,

Anurag

Hi Anurag,

No - Its not a supported configuration . 

Regards,

Leo Joseph.

Hi Leo,

Is there any other way or a better approach that both versions of store could be run in parallel/failover ?

Regards,

Anurag

Policy server version needs to always match Policy store version. There isn’t any exception to this.

Why would you want to use old policy store as failover store? Could you not just create another instance of new policy store as failover?

If you want to run old and new policy store in parallel , you will need to have corresponding version of Policy server pointing to it and use common key store. But with this approach as there wont be any policy store synchronization between old and new policy store , this should be used only temporarily during migration.

We were looking for different possibilities as to mitigate the risks involved during the migration phase. Your suggestions are helpful, thanks!

Regards,

Anurag