Is it possible to import directly the Apache Reverse Proxy configuration to CA Access Gateway (SPS) ?

Document ID : KB000071347
Last Modified Date : 19/02/2018
Show Technical Document Details
Question:
I'd like to get documentation on how to move the Apache Reverse Proxy
virtual hosts to the CA Access Gateway (SPS) directly without having
to redo the configuration manually.
Answer:
Unfortunately, there's no default out of the box way to import the Apache configuration
directly in the CA Access Gateway (SPS). 

For that, we suggest you to set an Idea on the Security Page : 

1. Go to the CA Security Overview Page: https://communities.ca.com/community/ca-security/ca-single-sign-on 
2. Click on the "Actions" drop-down menu and select "Create an idea." 
3. Give your idea a title and detailed description to encourage voting. 
4. Publish and vote on your idea! 

As you already know you'll need to break your httpd.conf virtual host 
in 2 parts. Here a POST in communities which discusses this and 
provides a sample : 

Secure Proxy Server 12.52 - Virtual Host Configurations 
https://communities.ca.com/message/241705123 

More in CA Access Gateway (SPS), you need to : 

- Set virtual host settings in server.conf. For that here some documentation : 

Configure the Virtual Host Settings Manually 
https://docops.ca.com/ca-single-sign-on/12-7/en/configuring/ca-access-gateway-configuration/configure-the-virtual-host-settings-manually 

Virtual Host Settings Configuration 
https://docops.ca.com/ca-single-sign-on/12-7/en/using/ca-access-gateway-administrative-ui/virtual-host-settings-configuration 

Configure Virtual Servers 
https://docops.ca.com/ca-single-sign-on/12-7/en/configuring/web-agent-configuration/configure-virtual-servers 

- Set reverse proxy rules in proxyrules.xml; 

Secure Proxy Server 12.52 - Virtual Host Configurations 
https://communities.ca.com/message/241705123 

Configure Proxy Rules Manually 
https://docops.ca.com/ca-single-sign-on/12-7/en/configuring/ca-access-gateway-configuration/configure-proxy-rules-manually 

Proxy Rules Configuration 
https://docops.ca.com/ca-single-sign-on/12-7/en/using/ca-access-gateway-administrative-ui/proxy-rules-configuration