User manual NOVELL INTELLISYNC MOBILE SUITE 7.0 SECURE GATEWAY ADMINISTRATOR GUIDE 04-2006

[. . . ] Intellisync Mobile Suite Secure Gateway Administrator's Guide Version 7. 0 April 2006 PUBLISHED BY: Nokia Enterprise Solutions 200 North Point Center East, Suite 600 Alpharetta, GA 30022 Copyright © 2006 Nokia. Nokia and Nokia Connecting People are registered trademarks of Nokia Corporation. Intellisync and Intellisync logo are trademarks of Nokia Corporation. Other trademarks mentioned are the property of their respective owners. [. . . ] Define the Secure Gateway cluster servers by entering the following property fore each server: SecureGatewayAddress<1-N>=<DNS hostname or IP address> 3. Restart the Secure Gateway service on each server in the cluster. A locked copy of the shared properties file is loaded on each server in the cluster. If you are setting up a cluster outside of the shared network, you must copy the sgsharedprop. properties to each server. Any changes to the sgsharedprop. properties file will have to be manually updated on each server. Intellisync Mobile Suite Secure Gateway Administrator's Guide 1­8 CHAPTER 2 Configuring the Secure Gateway This chapter offers information for configuring the Secure Gateway after installation. Turns on another layer of AES encryption between Mobile Gateway and Secure Gateway servers. Set value to 1 if Secure Gateway server is outside the corporate firewall. Regardless of this setting, all communication between the IMS server to devices is always encrypted. WebCommonDomainName= AdminForceSecureConnection=0 AdminTimeoutMinutes=15 EncryptMobileGatewayConnection=0 Intellisync Mobile Suite Secure Gateway Administrator's Guide 2­3 Configuring the Secure Gateway Configuring the Secure Gateway properties file Debugging and logging The following properties define and manage debugging and audit logging for Secure Gateway (default values shown): Property LoggingLevel=0 Description Sets debugging logging for Secure Gateway. Logging will appear in a file <secure_gateway_mm_dd_yyyy_n. log> located in the default installation log directory. The Secure Gateway server automatically picks up the change in two minutes. LoggingLevel property can be set from 1 (basic information) to 10 (detailed information). Specifies the number of days to keep logs before deletion. SecureGatewayLogExpirationDays=8 HTTP server The following properties define and manage HTTP server settings for Secure Gateway (default values shown): Property HttpIPAddress= Description Defines the IP address to listen for HTTP connections. Defaults to all IP addresses for server. Defines the port to listen for HTTP connections (includes Mobile Gateway servers and devices). Defines the port to listen for TCP connections from Mobile Gateway servers. Defines the port to listen for HTTPS connections (includes Mobile Gateway servers and devices). Set to zero (0) to not listen. HttpPort=80 SecureGatewayPort=80 HttpSSLPort=443 Intellisync Mobile Suite Secure Gateway Administrator's Guide 2­4 Configuring the Secure Gateway Configuring the Secure Gateway properties file Secure Gateway cluster configuration The following properties define and manage settings for a Secure Gateway cluster configuration (default values shown): Property SecureGatewaySharedPropertiesPath= Description Defines the path of the sgsharedprops. properties file. Used for Secure Gateway clusters. For more information on Secure Gateway clusters, refer to "Installing a Secure Gateway cluster" on page 1-7. Web tunneling Secure Gateway acts as an authenticated reverse-proxy and enables you to route HTTP requests to the Mobile Gateway behind the firewall. These requests are then mapped to the correct destination by the Mobile Gateway and sent. This setup works only in the single enterprise model. The following properties define and manage Web tunneling settings for a Secure Gateway (default values shown): Property WebTunnelingSupported=1 GALLookupTunnelingSupported=1 Description Allows tunneling of Web requests to the Mobile Gateway for dispatching. Allows tunneling of global address list (GAL) lookup Web requests to the Mobile Gateway for dispatching. [. . . ] Verify that Sync Server Name and Network Push Server are set to the external DNS/IP address that resolves to the Secure Gateway server. (To view information on the Secure Gateway server, click the Secure Gateway tab. ) 6. From the Intellisync Mobile Suite server, use Telnet to verify you can connect to the Secure Gateway. From a computer connected to the Internet, use Telnet to verify you can connect to the following: ­ <SyncServerName> 80 ­ <NetworkPushServer> 3102 9. [. . . ]