Novell INTELLISYNC MOBILE SUITE 7.0 - SECURE GATEWAY ADMINISTRATOR GUIDE... Manual de servicio

Intellisync Mobile Suite

Secure Gateway Administrator’s Guide

Version 7.0

April 2006

PUBLISHED BY:

Nokia Enterprise Solutions

200 North Point Center East, Suite 600

Alpharetta, GA 30022

trademarks of Nokia Corporation. Intellisync and Intellisync logo are trademarks of Nokia Corporation. Other

trademarks mentioned are the property of their respective owners. Nokia operates a policy of continuous

development. Therefore we reserve the right to make changes and improvements to any of the products described in

this document without prior notice. No part of this publication may be reproduced, transmitted, transcribed, stored in

a retrieval system, or translated into any human or computer language in any form or by any means without the

express written permission of:

Nokia Enterprise Solutions

Information Development

200 North Point Center East, Suite 600

Alpharetta, GA 30022

This publication is provided as is without warranty of any kind, express or implied, including, but not limited to, the

implied warranties of merchantability, fitness for a particular purpose, or non-infringement.

This publication could include technical inaccuracies or typographical errors. Changes are made periodically to the

information herein. These changes will be incorporated in new editions of the publication. Nokia may make

improvements and/or changes at any time to the product(s) and/or the program(s) described in this publication.

Synchrologic, Mobile Suite, RealSync, and Intellisync are trademarks of Nokia Corporation.

trademarks of Adobe Systems Incorporated which may be registered in certain jurisdictions.

3Com, Palm Computing, and HotSync are registered trademarks, and Palm Pilot, Palm III, Palm OS, the Palm

Computing platform logo, and all Palm logos are trademarks of Palm Computing, Inc., 3Com Corporation, or its

subsidiaries.

Certicom, movian, movianCrypt, movianVPN, and SSL Plus are trademarks and/or registered trademarks of

Certicom Corp.

Domino and Notes are trademarks, and Lotus and Lotus Notes are registered trademarks of Lotus Development

Corporation.

InstallShield is a registered trademark of InstallShield Corporation.

Microsoft, Word, Excel, Access, ActiveSync, Visual Basic, Visual C++, and Windows are either registered

trademarks or trademarks of Microsoft Corporation in the United States and/or other countries.

Netscape is a registered trademark of Netscape Communications Corporation.

SecurID is a registered trademark, and RSA Security is a trademark of RSA Security Inc.

Sun is a registered trademark and iPlanet is a trademark of Sun Microsystems, Inc.

All terms mentioned in this book that are known to be trademarks or service marks have been appropriately

capitalized. Nokia cannot attest to the accuracy of this information. Use of a term in this book should not be regarded

as affecting the validity of any trademark or servicemark.

All other trademarks or registered trademarks are the property of their respective owners.

Intellisync Mobile Suite Secure Gateway Administrator’s Guide iii

Contents

1 Installing Secure Gateway

Overview ......................................................................................................................... 1-2

Recommended Secure Gateway configuration................................................................ 1-2

Installing the Secure Gateway......................................................................................... 1-4

Setting up a Secure Gateway cluster ............................................................................... 1-7

Installing a Secure Gateway cluster.......................................................................... 1-7

2 Configuring the Secure Gateway

Using the Secure Gateway Admin Console .................................................................... 2-2

Configuring the Secure Gateway properties file ............................................................. 2-3

Authentication and encryption.................................................................................. 2-3

Debugging and logging............................................................................................. 2-4

HTTP server.............................................................................................................. 2-4

Secure Gateway cluster configuration ...................................................................... 2-5

Web tunneling........................................................................................................... 2-5

Configuring Secure Gateway to route HTTP requests.................................................... 2-6

Configuring Secure Gateway for SSL............................................................................. 2-8

3 Troubleshooting Secure Gateway

Troubleshooting Secure Gateway issues......................................................................... 3-2

CHAPTER

Installing Secure Gateway

This chapter contains instructions for installing the Secure Gateway

and provides a diagram of the recommended configuration.

Overview ............................................................................1-2

Recommended Secure Gateway configuration ..................1-2

Installing the Secure Gateway............................................1-4

Setting up a Secure Gateway cluster ..................................1-7

Installing Secure Gateway

Overview

Intellisync Mobile Suite Secure Gateway Administrator’s Guide 1–2

Overview

Your company policy may dictate how you deploy Nokia’s technology within

your network configuration. There are several configuration options available;

however, Nokia recommends the configuration described in this chapter using a

demilitarized zone (DMZ), or screened subnet. The DMZ is a computer or small

subnetwork that sits between a trusted internal network, such as a corporate

private LAN, and an untrusted external network, such as the public Internet.

Recommended Secure Gateway configuration

Nokia recommends using the Secure Gateway configuration within your network.

The Secure Gateway offers secure and scalable communications between mobile

devices and servers and consists of an HTTP listener and communications

services.

The Secure Gateway intercepts the HTTP requests from mobile devices to the

Intellisync Mobile Suite server and can route the requests in three ways:

zPush requests through TCP/IP port 3102

zSync requests through ports 80 and 443

zWeb requests through ports 80 and 443

The following diagram illustrates the recommended configuration for the Secure

Gateway. In this scenario, all Intellisync Mobile Suite components and enterprise

servers are behind the corporate inner firewall.

Installing Secure Gateway

Recommended Secure Gateway configuration

Intellisync Mobile Suite Secure Gateway Administrator’s Guide 1–3

Recommended Secure Gateway Configuration

Installing Secure Gateway

Installing the Secure Gateway

Intellisync Mobile Suite Secure Gateway Administrator’s Guide 1–4

The following table shows the default port settings. Your port settings may be

different depending on your network configuration.

Installing the Secure Gateway

To install and configure the Secure Gateway, follow these steps:

1. From the installation source folder, double-click the setup.exe file. The Secure

Gateway Setup starts and prepares the wizard application for the installation.

2. On the Secure Gateway Welcome screen, click Next. The Destination Folder

screen appears.

3. To install to a location other than the default folder, click Change. Otherwise,

click Next. The Secure Gateway Service User screen appears.

4. Complete the following fields:

Username. Enter the name for the specified user.

Password. Enter the password for the specified user.

5. Click Next. A confirmation screen appears.

6. Click Install. The installation program installs the Secure Gateway

components into the specified location. When the installation is complete, the

InstallShield Wizard Completed screen appears.

7. Click Finish. The Secure Gateway wizard closes.

Table 1: Default ports for communication from devices

Communication Protocol Default Port

HTTP

zSync traffic

zWeb tunneling

80 (configurable)

HTTPS

zSync traffic

zWeb tunneling

443 (configurable)

TCP/IP

zPush traffic 3102 (configurable)

Installing Secure Gateway

Installing the Secure Gateway

Intellisync Mobile Suite Secure Gateway Administrator’s Guide 1–5

After the installation, you must specify the name of the Secure Gateway computer

on the Intellisync Mobile Suite server. To do so, complete the following steps:

1. From the Windows Start menu on the Intellisync Mobile Suite server, choose

Programs, Intellisync Mobile Suite, and then choose Admin Console. The

Intellisync Mobile Suite control appears.

2. Select Intellisync Mobile Suite in the console tree.

3. From the Action menu, choose Properties. The Intellisync Mobile Suite

Properties dialog box appears.

4. Click the Secure Gateway tab. The Secure Gateway panel appears.

5. Click Add. The Add Secure Gateway dialog box appears.

6. Enter the name or IP address of the Secure Gateway server in the field and

click OK. The Secure Gateway dialog box closes, and the server name

appears in the Secure Gateway Servers field.

7. Click the Server Name tab.

Installing Secure Gateway

Installing the Secure Gateway

Intellisync Mobile Suite Secure Gateway Administrator’s Guide 1–6

8. Enter the Secure Gateway server name in the following fields:

zWebsite Server Name

zSync Server Name

zNetwork Push Server (this applies only to the IMS server)

9. Click OK. The Intellisync Mobile Suite Properties dialog box closes and the

Secure Gateway Admin Console appears.

10. Restart the Intellisync Mobile Suite service for your changes to take effect.

Installing Secure Gateway

Setting up a Secure Gateway cluster

Intellisync Mobile Suite Secure Gateway Administrator’s Guide 1–7

Setting up a Secure Gateway cluster

You can set up multiple Secure Gateways in a cluster. A Secure Gateway cluster

can provide redundancy to decrease the probability of system downtime in case

one Secure Gateway server should fail.

Installing a Secure Gateway cluster

1. Install Secure Gateway on the additional server(s) you want to add to the

cluster. Refer to “Installing the Secure Gateway” on page 1-4 for installation

steps.

2. Choose a fault-tolerant location to store a shared path since other Secure

Gateway servers in the cluster will access this location.

3. This shared path will contain a file, sgsharedprop.properties, which contains

the cluster server names. This file is automatically created after you have

added each server(s) to the cluster.

Modifying the securegateway.properties file

After you install Secure Gateway on each server, you must modify the

securegateway.properties file on each server. To do so, complete the following

steps:

1. From the C:\Program Files\SecureGateway\CommSvr\conf directory, open

the securegateway.properties file.

2. Define the Secure Gateway shared path for the cluster by entering the

following property:

SecureGatewaySharedPropertiesPath=\\\\<DNS hostname or IP

address>\\<drive>\\<path>\\

This path is the fault-tolerant location for the shared properties file.

3. Restart the Secure Gateway server. If the shared properties file does not exist,

it is automatically created in the shared path.

4. Repeat steps 1-3 for each server in the cluster.

Este manual sirve para los siguientes modelos

Tabla de contenidos

Otros manuales de Software de Novell

Novell

Novell IFOLDER 3.X - SECURITY ADMINISTRATOR GUIDE... Manual de servicio

Novell

Novell GROUPWISE 7 - DATABASES Manual de usuario

Novell

Novell ZENWORKS 10 CONFIGURATION MANAGEMENT SP3 - PREBOOT SERVICES AND IMAGING REFERENCE 10.3... Guía de referencia rápida

Novell

Novell GROUPWISE 7 - SECURITY POLICIES Manual de usuario

Novell

Novell EDIRECTORY 8.8 - GUIDE Manual de usuario

Novell

Novell CLIENT FOR LINUX 2.0 SP3 - 11-2009 Manual de usuario

Novell

Novell LINUX ENTERPRISE DESKTOP 10 SP2 - KDE... Manual de usuario

Novell

Novell ZENWORKS 10 CONFIGURATION MANAGEMENT SP3 - PREBOOT SERVICES AND IMAGING REFERENCE 10.3... Manual de instrucciones

Novell

Novell CLIENT FOR LINUX 1.2 Manual de usuario

Novell

Novell LINUX ENTERPRISE 11 SP1 - LINUX AUDIT Manual de usuario

Novell

Novell GROUPWISE 7 - TROUBLESHOOTING 2 Manual de usuario

Novell

Novell CLIENT FOR LINUX 1.1 Manual de instrucciones

Novell

Novell CUSTOMER CENTER 2.3 - GUIDE 4-8-2009 Manual de usuario

Novell

Novell GROUPWISE 8 - MONITOR Manual de usuario

Novell

Novell LINUX ENTERPRISE SERVER 10 SP1 - ARCHITECTURE-SPECIFIC INFORMATION... Manual

Novell

Novell CLIENT FOR LINUX 2.0 SP3 Manual de instrucciones

Novell

Novell ACCESS MANAGER 3.1 SP1 - SSL VPN SERVER GUIDE... Manual de usuario

Novell

Novell OPEN ENTERPRISE SERVER 2 SP 2 - CLUSTER SERVICES 1.8.7 FOR... Manual de usuario

Novell

Novell ZENWORKS ENDPOINT SECURITY MANAGEMENT 4.0 -... Manual de usuario

Novell

Novell GROUPWISE 7 - TROUBLESHOOTING 1 Manual de usuario

Novell

Novell ZENWORKS 10 CONFIGURATION MANAGEMENT SP3 - COMMAND LINE UTILITIES REFERENCE 10.3... Manual de usuario

Novell

Novell SENTINEL 6.1 SP2 - INSTALLATION GUIDE... Manual de usuario

Novell

Novell EDIRECTORY 8.8 SP3 Manual de usuario

Novell

Novell LINUX ENTERPRISE SERVER 11 - VIRTUALIZATION Manual de usuario

Manuales populares de Software de otras marcas

COMPRO

COMPRO COMPROFM Manual de usuario

Muratec

Muratec OFFICEBRIDGE ONLINE Manual de usuario

Oracle

Oracle Contact Center Anywhere 8.1 Manual de usuario

Adobe

Adobe 65007312 - Photoshop Lightroom Manual

Avaya

Avaya NULL One-X for RIM Blackberry Manual de usuario

HP ProLiant BL420c Manual de usuario

PS Audio

PS Audio PowerPlay Manual del propietario

Brady

Brady LOCKOUT PRO 3.0 Manual de servicio

Avaya

Avaya Interaction Center Manual de usuario

Texas Instruments

Texas Instruments TI-83 Plus Silver Edition Manual

Oracle

Oracle Application 9i Manual de usuario

Acer

Acer RDM Manual de usuario

Canon

Canon Vixia HF21 Manual de usuario

Canon

Canon ZR950 Manual de usuario

Samsung

Samsung Auto Backup Manual de usuario

Polycom

Polycom Vortex EF2201 Instrucciones de instalación y funcionamiento

Brocade Communications Systems

Brocade Communications Systems Brocade 8/12c Manual de usuario

Lexmark

Lexmark Apps Manual de servicio