Real Server Settings Example. NetIQ 4.2

If the protected resource is configured with a path of / or /*, the solution works but it can be vulnerable to attacks because the configuration opens ESP over a non-SSL port. Restricting the resource to /nesp/app/heartbeat automatically denies access to ESP except for the heartbeat.

13

Click

OK

and apply the changes to the configuration.

14

Add a line similar to the health check script:

For a Foundry switch, your string must look similar to the following if the hostname is ag1 and the

IP address is 10.10.16.172: healthck ag1 tcp

dest-ip 10.10.16.172

port http

protocol http

protocol http url "GET /nesp/app/heartbeat HTTP/1.1\r\nHost:st160.lab.tst"

protocol http status-code 200 200

l7-check

For an Alteon switch, your string must look similar to the following if the hostname is ag1 and the

IP address is 10.10.16.172: open 81,tcp send GET /nesp/app/heartbeat HTTP/1.1\r\nHOST:heartbeat.lab. tst\r\n\r\n expect HTTP/1.1 200 close

Real Server Settings Example

After setting up the health checks, you need to configure the real server settings. The following is an example from a Foundry switch.

778

High Availability and Fault Tolerance