TEC Workbook - IBM

TEC Workbook - IBM TEC Workbook - IBM

23.02.2013 Views

IBM Software 1.10.3 XML Firewall The XML Firewall is a general purpose HTTP(S) service that can process both XML and non- XML payloads. A wide array of actions can be applied to both inbound and outbound messages, such as encryption/decryption, digital signatures, XSL transformations, filtering, schema validation, and dynamic routing to name just a few. Checks for XML threats are provided automatically. Processing policies have access to all HTTP related details (headers, form fields, payload, status, etc.) for both the request and the response and can therefore make decisions or process messages based on the header’s existence or contents. A robust authentication and authorization engine, with built-in integration for a wide variety of policy servers (LDAP, IBM Tivoli® Access Manager, Kerberos/SPNEGO, IBM RACF®, etc.) can apply simple to complex security policies to both inbound and outbound messages. Security protocol mediation, such as HTTP Basic Authentication to SAML, or Kerberos/SPNEGO to IBM Lightweight Third-Party Authentication (LTPA), is easily configured through the WebGUI. There’s support for the latest security standards such as XACML, SAML, WS-Security, WS-Policy and WS-I Basic Profile. The XML Firewall also includes support for some of the latest WS-* standards, including WS-Reliable Messaging and WS-Addressing. 1.10.4 Multi-Protocol Gateway The Multi-Protocol Gateway service builds on the XML Firewall’s XML and security functionality by adding support for multiple protocols. In addition to HTTP and HTTPS, the Multi-Protocol Page 14 WebSphere Lab Jam

IBM Software Gateway supports WebSphere MQ, WebSphere JMS, TibcoEMS, FTP(S), SFTP, NFS and IMS. All of these protocols can be mixed and matched as necessary. Messages received over HTTPS can easily be routed to WebSphere MQ or JMS. 1.10.5 Web Service Proxy The Web Service Proxy provides all of the same services as a Multi-Protocol Gateway service; however it provides automatic configuration based on one or more Web Service Definition Language (WSDL) files. WSDL files may be obtained through subscriptions to a Universal Description, Discovery, and Integration (UDDI) or WebSphere Service Registry and Repository. A single Web Service Proxy object can act as a single point of entry for multiple WSDLs, automatically routing (or redirecting) the requests to the appropriate backend service. The Web Service Proxy will automatically apply schema validation to both inbound and outbound messages, further assuring message validity. Processing and security policies can be applied not only at the entire service level, but for individual operations within the service as well. Lab 1 – Introduction WebSphere DataPower SOA Appliances Page 15

<strong>IBM</strong> Software<br />

Gateway supports WebSphere MQ, WebSphere JMS, TibcoEMS, FTP(S), SFTP, NFS and IMS. All of<br />

these protocols can be mixed and matched as necessary. Messages received over HTTPS can easily be<br />

routed to WebSphere MQ or JMS.<br />

1.10.5 Web Service Proxy<br />

The Web Service Proxy provides all of the same services as a Multi-Protocol Gateway service;<br />

however it provides automatic configuration based on one or more Web Service Definition<br />

Language (WSDL) files. WSDL files may be obtained through subscriptions to a Universal<br />

Description, Discovery, and Integration (UDDI) or WebSphere Service Registry and Repository. A single<br />

Web Service Proxy object can act as a single point of entry for multiple WSDLs, automatically routing (or<br />

redirecting) the requests to the appropriate backend service.<br />

The Web Service Proxy will automatically apply schema validation to both inbound and outbound<br />

messages, further assuring message validity. Processing and security policies can be applied not only at<br />

the entire service level, but for individual operations within the service as well.<br />

Lab 1 – Introduction WebSphere DataPower SOA Appliances Page 15

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!