000033039 - SSL offloading at load balancer in RSA Archer

Document created by RSA Customer Support Employee on Jun 14, 2016•Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 3Show Document
  • Comment • 0
  • View in full screen mode

Article Content

Article Number000033039
Applies ToRSA Product Set: Archer
RSA Product/Service Type: Archer
RSA Version/Condition: Any
 
IssueDoes Archer supports the concept of SSL offloading, or SSL termination, at the load balancer?
In an SSL offloading (termination) scenario, IIS (Internet Information Services)only listens over port 80, while the end users communicate with Archer over port 443. Traffic from end users hits the load balancer, and the load balancer communicates with Archer over port 80. In this configuration, only one SSL certificate needs to be installed on the LB, and we don't need to have certs set up in every instance of IIS. 
ResolutionYes, Archer supports SSL offloading, or SSL termination, at the load balancer.
  • Configure IIS and the web.config file for http / port 80
  • In the Archer Control Panel, list the base URL as HTTPS.  (Archer uses the base URL to construct links, and you want these to point to the load balancer's URL.)

Attachments

    Outcomes