Policy Server and Web Agent communication protocol in use

Products

• CA Single Sign On Secure Proxy Server (SiteMinder)
• CA Single Sign On SOA Security Manager (SiteMinder)
• CA Single Sign-On
• CA Single Sign On Agents (SiteMinder)
• SITEMINDER

Issue/Introduction

Does the Policy server use SSL/TLS channel with the Web Agent to communicate?

 

Environment

 

All versions;

 

Resolution

SiteMinder Policy Server to Web Agent communication is secured using SiteMinder proprietary key (Session Key).

Hence SSL/TLS questions or consideration is irrelevant for SiteMinder Policy server to Web Agent communication.

Policy Server, however, uses SSL/TLS protocols to communicate with external stores like User Store/Session Store, etc.