Disable HTTP port on AdminUI and CA Access Gateway (SPS)

Products

• SITEMINDER
• CA Single Sign On Secure Proxy Server (SiteMinder)

Issue/Introduction

When running AdminUI and CA Access Gateway (SPS), how to disable http (port 80) service and keep only HTTPS (port 443) open.

 

Environment

Version R12.8.x

Symantec - Access Gateway

Resolution

At first glance, in order to make the AdminUI to close the HTTP port and uses only the HTTPS one, register it again in HTTPS (1).

About CA Access Gateway (SPS), to disable the port 80, enable the SSL on CA Access Gateway (SPS), and then removes the port 80 from httpd.conf, or change it for another port.

An easier way, it's suggested to only enable SSL on the CA Access Gateway (SPS), and then block the access to port 80 by a firewall on the CA Access Gateway (SPS) machine.

To configure CA Access Gateway (SPS), follow steps from documentation (2).

 

Additional Information

 

1. AdminUI (WAMUI) URL HTTPS 8443 and HTTP 8080 management and config
   
   
2. Configuring SSL on Apache Web Server Manually