{"id":7216,"date":"2013-02-13T22:03:12","date_gmt":"2013-02-14T03:03:12","guid":{"rendered":"http:\/\/jianmingli.com\/wp\/?p=7216"},"modified":"2013-04-10T10:18:06","modified_gmt":"2013-04-10T15:18:06","slug":"layer-7-policy-manager","status":"publish","type":"post","link":"https:\/\/jianmingli.com\/wp\/?p=7216","title":{"rendered":"Layer 7 Policy Manager"},"content":{"rendered":"
\n

Contents<\/h2>\n
    \n\t
  1. \n\t\tOverview<\/a>\n\t\t
      \n\t\t\t
    1. \n\t\t\t\tLayer 7 Gateway<\/a>\n\t\t\t<\/li>\n\t\t\t
    2. \n\t\t\t\tSecureSpan XML VPN Client<\/a>\n\t\t\t<\/li>\n\t\t\t
    3. \n\t\t\t\tPolicy Manager<\/a>\n\t\t\t<\/li>\n\t\t<\/ol>\n\t
    4. \n\t\tPolicy Manager<\/a>\n\t\t
        \n\t\t\t
      1. \n\t\t\t\tPolicy Manager Clients<\/a>\n\t\t\t<\/li>\n\t\t\t
      2. \n\t\t\t\tStart Policy Manager<\/a>\n\t\t\t<\/li>\n\t\t<\/ol>\n\t
      3. \n\t\tMenus<\/a>\n\t\t
          \n\t\t\t
        1. \n\t\t\t\tFile Menu<\/a>\n\t\t\t<\/li>\n\t\t\t
        2. \n\t\t\t\tEdit Menu<\/a>\n\t\t\t<\/li>\n\t\t\t
        3. \n\t\t\t\tTask Menu<\/a>\n\t\t\t<\/li>\n\t\t\t
        4. \n\t\t\t\tView Menu<\/a>\n\t\t\t<\/li>\n\t\t\t
        5. \n\t\t\t\tHelp Menu<\/a>\n\t\t\t<\/li>\n\t\t<\/ol>\n\t
        6. \n\t\tTasks<\/a>\n\t\t
            \n\t\t\t
          1. \n\t\t\t\tManage Cluster-Wide Properties<\/a>\n\t\t\t<\/li>\n\t\t\t
          2. \n\t\t\t\tManage Stored Passwords<\/a>\n\t\t\t<\/li>\n\t\t\t
          3. \n\t\t\t\tChange your own password<\/a>\n\t\t\t<\/li>\n\t\t\t
          4. \n\t\t\t\tManage Password Policy<\/a>\n\t\t\t<\/li>\n\t\t\t
          5. \n\t\t\t\tManage Listen Ports<\/a>\n\t\t\t<\/li>\n\t\t\t
          6. \n\t\t\t\tListen Port Properties<\/a>\n\t\t\t<\/li>\n\t\t\t
          7. \n\t\t\t\tManage Interfaces<\/a>\n\t\t\t<\/li>\n\t\t\t
          8. \n\t\t\t\tManage JDBC Connections<\/a>\n\t\t\t<\/li>\n\t\t\t
          9. \n\t\t\t\tManage JMS Destinations<\/a>\n\t\t\t<\/li>\n\t\t\t
          10. \n\t\t\t\tManage Email Listeners<\/a>\n\t\t\t<\/li>\n\t\t\t
          11. \n\t\t\t\tManage Roles<\/a>\n\t\t\t<\/li>\n\t\t\t
          12. \n\t\t\t\tManage Log Sinks<\/a>\n\t\t\t<\/li>\n\t\t\t
          13. \n\t\t\t\tManaging HTTP Options<\/a>\n\t\t\t<\/li>\n\t\t\t
          14. \n\t\t\t\tManage Service Resolution<\/a>\n\t\t\t<\/li>\n\t\t\t
          15. \n\t\t\t\tManage SFTP Polling Listeners<\/a>\n\t\t\t<\/li>\n\t\t\t
          16. \n\t\t\t\tWorking with SCP\/SFTP Messages<\/a>\n\t\t\t<\/li>\n\t\t\t
          17. \n\t\t\t\tManage KeyStore<\/a>\n\t\t\t<\/li>\n\t\t<\/ol>\n\t
          18. \n\t\tWorking with Services<\/a>\n\t\t
              \n\t\t\t
            1. \n\t\t\t\tPublish Services<\/a>\n\t\t\t<\/li>\n\t\t\t
            2. \n\t\t\t\tService Properties<\/a>\n\t\t\t<\/li>\n\t\t<\/ol>\n\t
            3. \n\t\tWorking with Internal Services<\/a>\n\t\t
                \n\t\t\t
              1. \n\t\t\t\tGateway Management Service<\/a>\n\t\t\t<\/li>\n\t\t\t
              2. \n\t\t\t\tSecurity Token Service (STS)<\/a>\n\t\t\t<\/li>\n\t\t\t
              3. \n\t\t\t\tUDDI Notification Service<\/a>\n\t\t\t<\/li>\n\t\t\t
              4. \n\t\t\t\tWSDM QosMetrics Service<\/a>\n\t\t\t<\/li>\n\t\t\t
              5. \n\t\t\t\tWSDM Subscription Service<\/a>\n\t\t\t<\/li>\n\t\t\t
              6. \n\t\t\t\tSpecifying a Resource for an WSDM Service<\/a>\n\t\t\t<\/li>\n\t\t\t
              7. \n\t\t\t\tWorking with Security Token Service (STS)<\/a>\n\t\t\t<\/li>\n\t\t\t
              8. \n\t\t\t\tWorking with FTP Requests<\/a>\n\t\t\t<\/li>\n\t\t\t
              9. \n\t\t\t\t<\/a>\n\t\t\t<\/li>\n\t\t<\/ol>\n\t
              10. \n\t\tPublish Test Service<\/a>\n\t\t
                  \n\t\t\t
                1. \n\t\t\t\tPublic Test Service<\/a>\n\t\t\t<\/li>\n\t\t\t
                2. \n\t\t\t\tSetup Internal Identity Provider (IIP)<\/a>\n\t\t\t<\/li>\n\t\t\t
                3. \n\t\t\t\tAuthenticate a Message against IIP<\/a>\n\t\t\t<\/li>\n\t\t\t
                4. \n\t\t\t\tCreate an AD Identity Provider<\/a>\n\t\t\t<\/li>\n\t\t\t
                5. \n\t\t\t\tRequire SSL Connection<\/a>\n\t\t\t<\/li>\n\t\t\t
                6. \n\t\t\t\tAdd HTTP Basic Auth<\/a>\n\t\t\t<\/li>\n\t\t<\/ol>\n\t
                7. \n\t\tSecureSpan Policy Language<\/a>\n\t\t
                    \n\t\t\t
                  1. \n\t\t\t\tPolicy Types<\/a>\n\t\t\t<\/li>\n\t\t\t
                  2. \n\t\t\t\tPolicy Editing Actions<\/a>\n\t\t\t<\/li>\n\t\t<\/ol>\n\t
                  3. \n\t\t<\/a>\n\t\t
                      \n\t\t\t
                    1. \n\t\t\t\t<\/a>\n\t\t\t<\/li>\n\t\t<\/ol>\n\t
                    2. \n\t\tReferences<\/a>\n\t<\/li>\n<\/ol>\n<\/ol>\n<\/div>\n
                       <\/div>\n

                      Overview<\/h2><\/span>\n

                      Layer 7 Gateway<\/h3><\/span>\n

                      * Layer 7 Gateway is a policy-optimized and ASIC-accelerated (Application Specific Integrated Circuit) XML Firewall and Web Services gateway that
                      \n– protects and controls how shared web services are accessed by and exposed to external applications.
                      \n* Layer 7 Gateway comes in three form factors:
                      \n– Virtual applicance. See                       this post<\/a> on how to install Layer 7 virtual appliance.
                      \n– ASIC-accelerated DMZ appliance. ASIC stands for application specific integrated circuit.
                      \n– 64-bit ASIC-accelerated appliance for EAI or ESB.<\/p>\n

                      SecureSpan XML VPN Client<\/h3><\/span>\n

                      * Is a cross-domain enablement product designed to speed and secure web services integrations spanning identity and security domains.
                      \n* Available in three form factors:
                      \n– Class lib
                      \n– Executable
                      \n– Integrated inside a Gateway for drop-in partner connectivity and web services federation<\/p>\n

                      Policy Manager<\/h3><\/span>\n

                      * GUI based application (either standalone or browser based) that allows administrators to centrally define, provision, verify, and audit fine-grained security and connectivity policies for cross-domain web services and XML integrations.
                      \n* Available as software for:
                      \n– Windows
                      \n– RHEL
                      \n– Solaris
                      \n– SOAP API<\/p>\n

                      Policy Manager<\/h2><\/span>\n

                      Policy Manager Clients<\/h3><\/span>\n

                      * Web: https:\/\/layer7:8443\/ssg\/webadmin\/<\/a>
                      \n* Standalone GUI<\/p>\n

                      Start Policy Manager<\/h3><\/span>\n

                      * Login<\/p>\n

                      \"\"<\/a><\/h6><\/span>\n

                      * Home page<\/p>\n

                      \"\"<\/a><\/h6><\/span>\n

                      Menus<\/h2><\/span>\n

                      File Menu<\/h3><\/span>\n
                      \"\"<\/a><\/h6><\/span>\n

                      Edit Menu<\/h3><\/span>\n
                      \"\"<\/a><\/h6><\/span>\n

                      Task Menu<\/h3><\/span>\n
                      \"\"<\/a><\/h6><\/span>\n

                      View Menu<\/h3><\/span>\n
                      \"\"<\/a><\/h6><\/span>\n

                      Help Menu<\/h3><\/span>\n
                      \"\"<\/a><\/h6><\/span>\n

                      Tasks<\/h2><\/span>\n

                      Manage Cluster-Wide Properties<\/h3><\/span>\n

                      * Cluster-Wide properties are accessed with notation: ${gateway.clusterProperty}<\/em><\/p>\n

                      \"\"<\/a><\/h6><\/span>\n
                      \"\"<\/a><\/h6><\/span>\n

                      Manage Stored Passwords<\/h3><\/span>\n
                      \"\"<\/a><\/h6><\/span>\n

                      * Add a new password:<\/p>\n

                      \"\"<\/a><\/h6><\/span>\n

                      * Edit a password:<\/p>\n

                      \"\"<\/a><\/h6><\/span>\n

                      * When Permit use via context variable reference<\/em> is checked, the password can be referenced by ${secpass.*}<\/strong> context variables.<\/p>\n

                      Change your own password<\/h3><\/span>\n
                      \"\"<\/a><\/h6><\/span>\n
                      \"\"<\/a><\/h6><\/span>\n

                      * By default, passwords are cached for
                      \n– 60 seconds if authenticated
                      \n– 30 seconds if not<\/strong> authenticated
                      \n* 15 seconds are needed for password changes to propagate through the cluster nodes.<\/p>\n

                      Manage Password Policy<\/h3><\/span>\n
                      \"\"<\/a><\/h6><\/span>\n
                      \"\"<\/a><\/h6><\/span>\n
                      \"\"<\/a><\/h6><\/span>\n

                      * Force Administrative Passwords Reset<\/p>\n

                      Manage Listen Ports<\/h3><\/span>\n
                      \"\"<\/a><\/h6><\/span>\n
                      \"\"<\/a><\/h6><\/span>\n

                      Listen Port Properties<\/h3><\/span>\n
                      \"\"<\/a><\/h6><\/span>\n
                      \"\"<\/a><\/h6><\/span>\n
                      \"\"<\/a><\/h6><\/span>\n
                      \"\"<\/a><\/h6><\/span>\n

                      Manage Interfaces<\/h3><\/span>\n

                      * Interfaces can be monitored by a listen port
                      \n* Interfaces can be configured to listen on one or more IP addresses<\/p>\n

                      \"\"<\/a><\/h6><\/span>\n

                      Manage JDBC Connections<\/h3><\/span>\n

                      * Allow the Gateway to query external databases and then use the query results during policy consuption.
                      \n* Menu: Task > Manage JDBC Connection<\/em><\/p>\n

                      \"\"<\/a><\/h6><\/span>\n
                      \"\"<\/a><\/h6><\/span>\n

                      Manage JMS Destinations<\/h3><\/span>\n

                      TODO<\/p>\n

                      Manage Email Listeners<\/h3><\/span>\n

                      * Used to periodically poll an email server for SOAP messages to process.
                      \n* Supported email server types:
                      \n– POP3
                      \n– IMAP4\/IMAP4rev1
                      \n* Supports SSL encryption
                      \n– can use internal trust store for trusting email server certs
                      \n* Menu: Task > Manage Email Listeners<\/em>
                      \n* Create a new mail listener:<\/p>\n

                      \"\"<\/a><\/h6><\/span>\n

                      Manage Roles<\/h3><\/span>\n

                      * Menu: Task > Manage Roles<\/em><\/p>\n

                      \"\"<\/a><\/h6><\/span>\n

                      * Add user to role:<\/p>\n

                      \"\"<\/a><\/h6><\/span>\n

                      * Remove user from role:<\/p>\n

                      \"\"<\/a><\/h6><\/span>\n

                      Manage Log Sinks<\/h3><\/span>\n

                      * Menu: Task > Manage Log\/Audit Sinks<\/em>
                      \n* Mange log sink:<\/p>\n

                      \"\"<\/a><\/h6><\/span>\n

                      * Mange audit sink:<\/p>\n

                      \"\"<\/a><\/h6><\/span>\n

                      Managing HTTP Options<\/h3><\/span>\n

                      * Used to configure options to be used by the Gateway for outbound(?) HTTP(S) connections:
                      \n– login credentials for an HTTPS host
                      \n– define a proxy for the host
                      \n– specify a private key to be used for authentication
                      \n* Also used to edit the default HTTP proxy settings
                      \n* Menu: Task > Manage HTTP Options<\/em>
                      \n* Add an HTTP option:<\/p>\n

                      \"\"<\/a><\/h6><\/span>\n

                      * Set default HTTP proxy:<\/p>\n

                      \"\"<\/a><\/h6><\/span>\n

                      Manage Service Resolution<\/h3><\/span>\n

                      * Menu: Task > Manage Service Resolution<\/em><\/p>\n

                      \"\"<\/a><\/h6><\/span>\n

                      Manage SFTP Polling Listeners<\/h3><\/span>\n

                      * Menu: Task > Additional Actions > Manage SFTP Polling Listeners<\/em>
                      \n* Connection setting:<\/p>\n

                      \"\"<\/a><\/h6><\/span>\n

                      * Message Processing setting:<\/p>\n

                      \"\"<\/a><\/h6><\/span>\n

                      Working with SCP\/SFTP Messages<\/h3><\/span>\n

                      The Layer 7 Gateway supports SCP (Secure Copy Protocol) and SFTP (SSH File Transfer Protocol) messages, both inbound and outbound. This allows the Gateway to work with backend services which rely on these protocols. These messages are secured using the SSH2 protocol (SSH1 is not supported).
                      \n* Using Inbound SSH:
                      \n– configure an internal SSH server running on a Gateway listen port. This is done by creating a new listen port using the SSH2 protocol.
                      \n– The SSH listener supports inbound SCP upload and inbound SFTP PUT commands to the Gateway.
                      \n– This listener automatically opens and closes the SSH port on start and stop.
                      \n– Can use both password authentication or pki authentication.
                      \n* Using Outbound SSH:
                      \n– outbound SCP upload and download with an external SCP server
                      \n– outbound SFTP “PUT” and “GET” with an external SFTP server<\/p>\n

                      Manage KeyStore<\/h3><\/span>\n

                      Working with Services<\/h2><\/span>\n

                      Publish Services<\/h3><\/span>\n

                      * Web services from existing WSDL:
                      \n– use Publish SOAP Web Service Wizard
                      \n– Default Gateway URI:
                      \nhttp:\/\/layer7:8080\/ssg\/soap<\/em>
                      \nhttps:\/\/layer7:8443\/ssg\/soap<\/em>
                      \n* Web services require the generation of a new WSDK:
                      \n– use Create WSDL Wizard
                      \n* Non-SOAP applications:
                      \n– use Publish REST, Web API, or Other Service Wizard<\/p>\n

                      Service Properties<\/h3><\/span>\n

                      * Accessed by right clicking and select Service Properties<\/em>.
                      \n* General properties:
                      \n– Rename service display name
                      \n– Disable\/enable service
                      \n– Enable WS-Security processing
                      \n– Enable policy debug tracing<\/p>\n

                      \"\"<\/a><\/h6><\/span>\n

                      * HTTP\/FTP properties:
                      \n– Change resolution path
                      \n– Check resolution conflicts
                      \n– Change HTTP methods<\/p>\n

                      \"\"<\/a><\/h6><\/span>\n

                      * WSDL properties:
                      \n– Reset WSDL
                      \n– Edit WSDL
                      \n– Change SOAP version
                      \n– Allow requests intended for operations not supported by the WSDL<\/p>\n

                      \"\"<\/a><\/h6><\/span>\n

                      * UDDI properties<\/p>\n

                      Working with Internal Services<\/h2><\/span>\n
                      \"\"<\/a><\/h6><\/span>\n

                      Gateway Management Service<\/h3><\/span>\n

                      * expose Gateway Management API<\/p>\n

                      Security Token Service (STS)<\/h3><\/span>\n

                      * requires WSDL
                      \n* uses various tokens, e.g. Create SAML Token<\/em>, Create Security Context Token<\/em><\/p>\n

                      UDDI Notification Service<\/h3><\/span>\n

                      * Notifies client about changes in UDDI registry: Handle UDDI Subscription Notification<\/em> assertion<\/p>\n

                      WSDM QosMetrics Service<\/h3><\/span>\n

                      * Allows client to request metrics data for a given managed resource.
                      \n* Has one method:
                      \n– GetMultipleResourceProperties<\/em><\/p>\n

                      WSDM Subscription Service<\/h3><\/span>\n

                      * Allows client to subscribe to receive notifications about changes in a resource
                      \n* Has three methods:
                      \n– Subscribe<\/em>
                      \n– Renew<\/em>
                      \n– Unsubscribe<\/em><\/p>\n

                      Specifying a Resource for an WSDM Service<\/h3><\/span>\n

                      * Include resource id within the URL:
                      \nhttp:\/\/:8080\/wsdm\/qosmetrics?serviceoid=12345<\/strong><\/em>
                      \n* Include service id as part of the SOAP message:<\/p>\n

                      \r\nhttp:\/\/ssghost:8080\/service\/hello<\/ResourceId>\r\n<\/pre>\n
                      * Include resource URI within the URL of the query string:
                      \nhttp:\/\/:8080\/wsdm\/qosmetrics?serviceuri=\/myuris\/service1uri<\/strong><\/em><\/p>\n
                      Working with Security Token Service (STS)<\/h3><\/span>\n
                      * STS issues following tokens:
                      \n– SAML tokens using Create SAML Token<\/em> assertion
                      \n– Security Context tokens using Create Security Context Token<\/em> assertion
                      \n* Issued tokens can be returned in a Request Security Token Response (RSTR) using Build RSTP SOAP Response<\/em> assertion
                      \n* Security Context tokens can be cancelled using the Cancel Security Context<\/em> assertion
                      \n* Publish STS:<\/p>\n
                      \"\"<\/a><\/h6><\/span>\n
                      * Default STS policy:<\/p>\n
                      \"\"<\/a><\/h6><\/span>\n
                      \"\"<\/a><\/h6><\/span>\n
                      \"\"<\/a><\/h6><\/span>\n
                      * Sample Messages<\/p>\n
                      Working with FTP Requests<\/h3><\/span>\n
                      <\/h3><\/span>\n
                      <\/h6><\/span>\n
                      Publish Test Service<\/h2><\/span>\n
                      Public Test Service<\/h3><\/span>\n
                      * Click Home > Publish SOAP Web Service<\/em>
                      \n– Or click Tasks > Publish SOAP Web Service<\/em><\/p>\n
                      \"\"<\/a><\/h6><\/span>\n
                      * Enter WSDL location, e.g., http:\/\/openidmbox:8080\/cxf-jaxws-one-1.0-SNAPSHOT\/HelloWorld?wsdl<\/strong> and click Next:<\/p>\n
                      \"\"<\/a><\/h6><\/span>\n
                      * Select Custom resolution path<\/em> and enter value \/HelloWorld<\/strong><\/p>\n
                      \"\"<\/a><\/h6><\/span>\n
                      * Click Finish<\/em> to accept all defaults.
                      \n* Service should show up in the Service panel:<\/p>\n
                      \"\"<\/a><\/h6><\/span>\n
                      * New WSDL can now be accessed from Layer7 with URL: https:\/\/layer7:8443\/HelloWorld?wsdl<\/a><\/p>\n
                      Setup Internal Identity Provider (IIP)<\/h3><\/span>\n
                      * Add a new user named l7test<\/strong> with password Welcome1!<\/strong><\/p>\n
                      \"\"<\/a><\/h6><\/span>\n
                      * Add a new group named Accounting<\/strong><\/p>\n
                      \"\"<\/a><\/h6><\/span>\n
                      \"\"<\/a><\/h6><\/span>\n
                      * Query internal identity provider:<\/p>\n
                      \"\"<\/a><\/h6><\/span>\n
                      \"\"<\/a><\/h6><\/span>\n
                      Authenticate a Message against IIP<\/h3><\/span>\n
                      * Double click the service, e.g. HelloWorldImplService<\/em>, to open the service policy panel:<\/p>\n
                      \"\"<\/a><\/h6><\/span>\n
                      * Authenticate against any<\/strong> user from IIP:
                      \n– Drag and drop Assertions > Access Control > Authenticate Against Identity Provider<\/em> to policy panel<\/p>\n
                      \"\"<\/a><\/h6><\/span>\n
                      \"\"<\/a><\/h6><\/span>\n
                      * Authenticate against a specific user or group from IIP:
                      \n– Drag and drop Assertions > Access Control > Authenticate User or Group<\/em> to policy panel<\/p>\n
                      \"\"<\/a><\/h6><\/span>\n
                      \"\"<\/a><\/h6><\/span>\n
                      * Authenticate against multiple users or groups from IIP:
                      \n– Drag and drop additional Assertions > Access Control > Authenticate User or Group<\/em> to policy panel<\/p>\n
                      \"\"<\/a><\/h6><\/span>\n
                      Create an AD Identity Provider<\/h3><\/span>\n
                      * Create a service account on AD with user name svc.l7<\/strong> and password Welcome1!<\/strong><\/p>\n
                      \"\"<\/a><\/h6><\/span>\n
                      \"\"<\/a><\/h6><\/span>\n
                      \"\"<\/a><\/h6><\/span>\n
                      * Right click Identity Provider<\/em> and then select Create LDAP Identity Provider<\/em><\/p>\n
                      \"\"<\/a><\/h6><\/span>\n
                      * Select Provider Type: MicrosoftActiveDirectory<\/em> and enter login info:<\/p>\n
                      \"\"<\/a><\/h6><\/span>\n
                      * Click Test button to validate connection.<\/p>\n
                      \"\"<\/a><\/h6><\/span>\n
                      * Accept default Group Object Classes<\/em> screen and click Next<\/em><\/p>\n
                      \"\"<\/a><\/h6><\/span>\n
                      * Accept default User Object Classes<\/em> screen and click Next<\/em><\/p>\n
                      \"\"<\/a><\/h6><\/span>\n
                      * Accept default Advanced Configuration<\/em> screen and click Next<\/em><\/p>\n
                      \"\"<\/a><\/h6><\/span>\n
                      * Accept default Certificate Settings<\/em> screen and click Next<\/em><\/p>\n
                      \"\"<\/a><\/h6><\/span>\n
                      * Click Finish<\/em><\/p>\n
                      \"\"<\/a><\/h6><\/span>\n
                      Require SSL Connection<\/h3><\/span>\n
                      * Double click service to open policy panel.
                      \n* Drag and drop Assertions > Transport Layer Security (TLS) > Require SSL or TLS Transport<\/em> into policy panel.
                      \n* Click Save and Activate.<\/p>\n
                      \"\"<\/a><\/h6><\/span>\n
                      * From SoapUI, check that request to http:\/\/layer7:8080\/HelloWorld<\/em> endpoint is not longer working.<\/p>\n
                      \"\"<\/a><\/h6><\/span>\n
                      * From SoapUI, check that request to https:\/\/layer7:8443\/HelloWorld<\/em> endpoint is still working.<\/p>\n
                      \"\"<\/a><\/h6><\/span>\n
                      Add HTTP Basic Auth<\/h3><\/span>\n
                      * Double click service to open policy panel.
                      \n* Drag and drop Assertions > Access Control > Require HTTP Basic Credentials<\/em> into policy panel and immediately under Require SSL or TLS Transport<\/em>.
                      \n* Drag and drop Assertions > Access Control > Authenticate User or Group<\/em> into policy panel and immediately under Require HTTP Basic Credentials<\/em>.
                      \n* Select ad.mytest.local > Service Layer7<\/em><\/p>\n
                      \"\"<\/a><\/h6><\/span>\n
                      * Right click Authenticate User: svc.l7 from [ad.mytest.local]<\/em> and select Target Message<\/em>. Select Request<\/em> and click OK<\/em> button.<\/p>\n
                      \"\"<\/a><\/h6><\/span>\n
                      \"\"<\/a><\/h6><\/span>\n
                      * Click Save and Activate.<\/p>\n
                      \"\"<\/a><\/h6><\/span>\n
                      * From SoapUI, check that request to https:\/\/layer7:8443\/HelloWorld<\/em> endpoint now requires authentication.<\/p>\n
                      \"\"<\/a><\/h6><\/span>\n
                      * Add to SoapUI request:
                      \n– Authorisation Type: Preemptive
                      \n– Username: svc.l7
                      \n– Password: Welcome1!<\/p>\n
                      \"\"<\/a><\/h6><\/span>\n
                      * Check that request is successful with correct username and password.<\/p>\n
                      SecureSpan Policy Language<\/h2><\/span>\n
                      \"\"<\/a><\/h6><\/span>\n
                      Policy Types<\/h3><\/span>\n
                      * Constraint assertions:
                      \n– Require SSL
                      \n– Require credentials
                      \n– Require signatures\/encryption
                      \n* Action assertions
                      \n– Authenticate credentials
                      \n– Transforming messages
                      \n– Turn on auditing
                      \n– Routing messages<\/p>\n
                      Policy Editing Actions<\/h3><\/span>\n
                      * Add an assertion: drag and drop or click add policy button (]>[<\/em>)
                      \n* Rearrange an assertion: drag and drop or click up and down arrows
                      \n* Disable an assertion: click red X inside a circle button
                      \n* Delete an assertion: click the black X button
                      \n* Expand assertion: click the expand button (up arrow on top of bottom arrow)
                      \n* Copy and paste an assertion: Ctr-C<\/em>\/Ctr-V<\/em>
                      \n* Open configurable properties: double click an assertion or right click and select … Properties<\/em>
                      \n* Add ‘All…’ Folder: right click and select it
                      \n* Add ‘At least one…’ Folder: right click an select it<\/p>\n
                      \"\"<\/a><\/h6><\/span>\n
                      <\/h2><\/span>\n
                      <\/h3><\/span>\n
                      <\/h6><\/span>\n
                      References<\/h2><\/span>\n
                      * Layer 7 Policy Manager User Manual Version 6.2<\/p>\n","protected":false},"excerpt":{"rendered":"
                      Overview Layer 7 Gateway * Layer 7 Gateway is a policy-optimized and ASIC-accelerated (Application Specific Integrated Circuit) XML Firewall and Web Services gateway that – protects and controls how shared web services are accessed by and exposed to external applications. … Continue reading →<\/span><\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_exactmetrics_skip_tracking":false,"_exactmetrics_sitenote_active":false,"_exactmetrics_sitenote_note":"","_exactmetrics_sitenote_category":0,"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[306],"tags":[630],"class_list":["post-7216","post","type-post","status-publish","format-standard","hentry","category-layer7","tag-layer7"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/p8cRUO-1So","_links":{"self":[{"href":"https:\/\/jianmingli.com\/wp\/index.php?rest_route=\/wp\/v2\/posts\/7216","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/jianmingli.com\/wp\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/jianmingli.com\/wp\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/jianmingli.com\/wp\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/jianmingli.com\/wp\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=7216"}],"version-history":[{"count":27,"href":"https:\/\/jianmingli.com\/wp\/index.php?rest_route=\/wp\/v2\/posts\/7216\/revisions"}],"predecessor-version":[{"id":7608,"href":"https:\/\/jianmingli.com\/wp\/index.php?rest_route=\/wp\/v2\/posts\/7216\/revisions\/7608"}],"wp:attachment":[{"href":"https:\/\/jianmingli.com\/wp\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=7216"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/jianmingli.com\/wp\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=7216"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/jianmingli.com\/wp\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=7216"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}