ProxySG & Advanced Secure Gateway

Hi Team,

Which version of BCAAA server support windows 2012

2. How to change from BCAAA to IWA direct method for authenticaiton

3. procedure to upgrade BCAAA from 5.X to 6.X

Thanks,

Ram.

1. I just install the BCAAA in windows 2012 , which is the last version 6.1.4 , and verything works fine 

2. It's not recommand to use IWA direct method , because it will cause CPU load high sometimes and make authentication failed . But if you really want to use this method , you should first add ProxySG into your AD domain at configuration > Authentication > windows domain . then the IWA direct button will be able to choose , when you set the authenticaiton realm in VPM, you can choose the IWA direct realm which you have defined

3. Usually, I will uninstall the older version and install the new version

"It's not recommand to use IWA direct method"

Is there any documentation which supports this statement? I thought that IWA Direct is the successor of BCAAA (eg it supports a higher amount of Schannel connections).

Hi,

           IWA-Direct is indeed the Successor of BCAAA and is becoming the preferred method for most of the new customers. There were some hiccups during the initial days and now is getting matured without much issues. Since this is on-box, it is recommended to be on the latest GA release to get the benefit of any fixes in the IWA-Direct code.

Dear Aravind,

Could you please recommend most statbel version.

Thanks,

Ram

Hi Ram,

             Are you asking about BCAAA version or SGOS version ?

stabel BCAAA version which needs to run in the windows 2012 server.

Thanks,

Ram.

Hi Ram,

                 The latest BCAAA will be the stable one and believe it to be 6.1.4. We don't have frequent releases for BCAAA.
 

Dear Aravind,

Thank you for the udpate.

Is this BCAAA 6.1.4 support windows 2012. 

Customer using below versions.

BCAAA server version: 5.5.6.2.72170

Windows server current version: 2003

Windows server upgrading version: 2012

ProxySG version: 6.5.10.5

1. What is the procedure to upgrade from BCAAA 5.5.6.2 to 6.1.4?

2. Is there any user impact while upgrading BCAAA?

3. Is the proxy 6.5.10.5 support BCAAA 6.1.4?

Thanks,

Ram.

Hi Ram,

Pl find answers below

1) Uninstall old BCAAA version and then install 6.1.4. Since you are setting up a new Win2K12 server, just installing 6.1.4 would be enough

2) Authentication with this BCAAA will not function while you are uninstalling and installing. So planed time-window is advised.

3) Yes. 6.5.x support BCAAA 6.x version

Dear Aravind,

How to upgrade BCAAA version from 5.5.X.X to 6.1.X in the same windows 2008 server.

Thanks,

Ram.

Hi Ram,

              Just uninstall the BCAAA 5.5.x from the machine. Then (only) install the new BCAAA 6.x version.

Note: If you are not able to see the uninstall option for BCAAA 5.5.x in Add/Remove programs, follow the article https://support.symantec.com/en_US/article.TECH241000.html for manual removal. In this case, a restart of the server is required.

Hi Aravind,

Please advise on the backup the current BCAAA version files in case we need to revert back the changes.

Please share the KB to instll BCAAA and integrate with proxy.

Thanks,

Ram.

Hi Ram,

           There is only a small file called BCAAA.ini which can be called as a configuration file. and in most of the deployment, there won't be any change performed on this file. Just open this file "bcaaa.ini" in the BCAAA installation folder and see whether it shows any configuration other than default values.

Hi Aravind,

Thanks for the update.

Can we integrate proxy with TACACS server for authentication. If yes, can you please share me the procedure.

Thanks,

Ram.

Hi Aravind,

I got the information, TACACS is not supported by proxySG.

https://support.symantec.com/en_US/article.TECH242360.html

Thanks,

Ram.

Hi Ravaind,

We are getting below event logs:canb you share some insights on this error logs:

Unrecognised error reported to authentication agent."  2D 3B0003:1   pe_policy_action_auth_internal.cpp:676