Siteminder Access Gateway : Identify the applications making a connection via Access Gateway

Products

• SITEMINDER

Issue/Introduction

Requirement : Procedure to identify the application URL making the connection with Access Gateway via the trace logs.

 

Environment

Release : 12.8.x

Access Gateway

Resolution

-> Enable the AG Agent trace with the proxyrule.xml debug enabled and analyze the trace to see what applications are being accessed .

Example for enabling debug tag in Proxyrules.xml highlighted below

<!-- Proxy Rules-->
<nete:proxyrules xmlns:nete="https://example.com/" debug="yes">
    <nete:cond criteria="beginswith" type="uri">

 

Here is the sample logs

For example , Each Agent trace single transaction will show the processing of the Agent for the request and pulling the below 

***** Front End (client to AG):

----------------------------------

[Resolved HTTP_HOST: '_host.example.com'.]

[Resolved agentname: 'agent'.]

[Resolved URL: '/myapplication'.]

 

***** AG to backend (proxy):

------------------------------

][ProxyValve::invoke][ProxyValve.invoke() Setting HTTP status to 200 allowing this request to proceeed. Return Code from HLA = 4]
][Tomcat5serializedAgentData::setStatus()][Setting response status = 200]
][ProxyValve::invoke][The agent finished processing the request.]
][Noodle::service][Method is: GET Content length is: 0]
][addRequestHeaders][Need to preseve Proxy HOST Header.Sending Proxy Host to the backend web server]
][execute][Got protocol version HTTP]
][execute][Sending request to backend = _host.example.net url = http://_host.example.net/123]
][requestConnection(): ][Get connection: {}->http://_host.example.net:80, timeout = 180000]
][openConnection()][Connecting to _host.example.net/10.0.0.1:80]
][execute][Response status code from backend webserver is 301]
][Noodle::doGet][Received redirect status code = 301]
][Noodle::doGet][Noodle.proxyRequest succeeded.  Writing out response data if available]
][releaseConnection(): ][Released connection is reusable.]
][Noodle::doGet][Returned streamed content length of 252]