Switch the BCAAA server on the Edge SWG (ProxySG) appliance back to Primary from Alternate.

Products

• ProxySG Software - SGOS

Issue/Introduction

Unable to change BCAAA server from Alternate to back to Primary BCAAA server on Edge SWG (ProxySG).

 

Resolution

It is possible to configure two BCAAA servers that the Edge SWG (ProxySG) can communicate with for IWA Authentication. These BCAAA servers are set as a Primary and an Alternate, as seen in the image below.

By default, the Edge SWG (ProxySG) appliance will connect to the Primary BCAAA server. If the Primary fails or becomes unavailable, the Edge SWG (ProxySG) will automatically switch to the Alternate BCAAA server.

If, at any given time, you want to change the BCAAA server the Edge SWG (ProxySG) appliance is actively connected to, you must bring the other BCAAA service offline.

For example, if you are using the Alternate BCAAA server due to a failure with the Primary, but want to switch back to the Primary after the issue has been resolved, you must take the Alternate BCAAA service offline. The  ProxySG will then see the failure and try to connect to the other BCAAA server listed, the Primary, in this example.

Legacy Java Based Management Console

 

Edge SWG (ProxySG) Admin Console