Install and Setup WSSL Proxy

WSSL (Web Secure Session Launcher) Proxy is a Sectona PAM component that enables secure HTTPS access to PAM.

• Before You Begin

• Deployment Scenarios

• System Requirements

• Install the Vault WSSL Proxy Component

Before you Begin

1. The two major components that make PAM, Sectona Web Access and Vault Storage Host are installed and setup.

2. Finalise the deployment architecture for privilege access over the internet. Consider the following deployment scenarios and select the more suitable configuration to meet your requirements.

Deployment Scenarios

Case 1) PAM Server is not exposed to the Internet

According to the Sectona architecture and as mentioned in the prerequisites that the Sectona WSSL Proxy and the RAP components are created on the DMZ network. In order to have a secure connection to PAM, an external dedicated server on the DMZ network is required. The aforementioned components are configured on this server. Depending on whether the server configuration is setup where the Sectona Component, Remote Access Publisher is downloaded on a separate server. The connection through this network from an isolated server is routed to through the Public IP using a Public URL in order to access PAM.

Case 2) PAM Server is exposed to the Internet

The architecture is structured where the PAM application, Vault and the WSSL components are situated on a dedicated server in an internal network. This server is exposed to the internet via a public IP. The public IP routed the traffic to the internal network allowing session connection via the WSSL Proxy. There is no requirement of an additional server on a DMZ network for PAM.

System Requirements

Install the WSSL Proxy Component

1. Login to the Sectona portal.

2. On the Platform Configuration page, under the System section, click on About.

3. Click on the components tab.

4. Download the WSSL Proxy Host component by clicking on the download icon.

5. Run the installer and install the missing prerequisite components by clicking on "Install" option.

6. Accept the license agreement

7. Enter the following details in the form displayed.

8. After entering the correct details click on Next.

9. Select the "Do Not Harden" option.

10. The progress bar of the installation will be displayed. After completing 100% click on Next.

11.  Click on the link displayed to connect to Sectona PAM via WSSL Proxy.

Configure WSSL Proxy Component in PAM

1. Login to the Sectona Portal and select PAM from the Product Navigator.

2. Click on Setup from the Navigation Bar.

3. Select Landing and Proxy Server from the sidebar.

4. Click on Add Proxy → WSSL Proxy from the menu from the top right.

5. Enter the following details in the form displayed.

Click on Save.

7. Define and configuring NAT. Click on the Action button of the newly created proxy.

Custom ranges can be entered depending on the user’s existing IP Address.

For example, IP range can be specified for users working in a hybrid state in order to control access and maintain efficient utilisation of bandwidth.

How to define IP range depending on location.

8. Click on Manage and click on User Management → User section in the sidebar.

9. Check the User Access Policy of the selected User by click on Policies from the Navigation Bar.

10. Enter the name of the User Access Policy in Search and click on its respective Action button.

10. Select the Access Type from the drop-down menu and under the Permission menu select the Enforce WSSL option.

Click on Save