Can IWA protocol be used on top of Netscape/Sun iPlanet to authenticate the users on the Proxy?

Products

• ProxySG Software - SGOS

Issue/Introduction

Can you confirm that we can use IWA protocol on top of Netscape/Sun iPlanet to authenticate the users on the Proxy?

Is this authentication schema supported officially by Broadcom?

Environment

Release :

Resolution

For Netscape/Sun iPlanet, be informed that they are supported directory services, for LDAP authentication on the SWG Edge (ProxySG). See the Tech. Article with the URL below, for reference.

https://techdocs.broadcom.com/us/en/symantec-security-software/web-and-network-security/proxysg/7-3/introduction/ldap-realm-authentication-and-authorization/supported-directory-services.html

To utilize any of Netscape/Sun iPlanet directory services with the SWG Edge (ProxySG), you MUST utilize LDAP authentication and not IWA, leveraging the LDAP realm. Refer to the snippets below, for specific guidance.

Under the LDAP Server settings, you are able to point to the Netscape/Sun iPlanet directory servers, having already selected the relevant LDAP Server Type. See the snippet below, for guidance.

Note: There isn't a way to deploy IWA and use Netscape/Sun iPlanet directory services. IWA stands for the Integrated Windows Authentication. IWA is strictly Windows and leverages only the Windows Active Directory services.

So, IWA can only be deployed on top on the Windows Active Directory Service. There is no such option. See the snippet below, for guidance. 

Unlike the LDAP authentication, the "Type of LDAP server" & "LDAP Protocol Version" are visibly unavailable with IWA authentication. The reason is quite simple and already explained. IWA is strictly Windows and leverages on only the Microsoft Windows Active Directory Service.

Netscape/Sun iPlanet directory services are supported only with LDAP authentication, and not IWA, on the SWG Edge (ProxySG).