July 2009 - Frédéric Esnouf

Publishing web applications though IAG : what if it fails ?

Microsoft IAG (Intelligent Application Gateway) is a powerful “mobility” gateway capable of providing remote access to different kind of people: employees, partners, customers, … It introduces several approaches to provide this mobility: · ...

Published Fri, Jul 31 2009 8:20 PM by Bienvenue, on Frédéric ESNOUF's Web Log

Filed under: howTo-Filters, IAG

Mobility in the middle of your lifestyle

Lucky me, I am working for a company where mobility is truly part of the way we work. When I joined Microsoft, they gave me a “package” of technologies that I use every day. Check this picture: · A Laptop: running...

Published Fri, Jul 31 2009 3:13 PM by Bienvenue, on Frédéric ESNOUF's Web Log

Filed under: IAG, Mexicaine, A, Porcine, grippe, Influenza A virus subtype H1N1, H1N1

GEMALTO (Gemplus / Axalto Merger)

GEMALTO authentication server is called Protiva. It is a global authentication solution which can especially provide OTP (One Time Password) authentication. The integration is very simple since the protocol used between IAG and Protiva server is...

Published Tue, Jul 21 2009 6:23 PM by Bienvenue, on Frédéric ESNOUF's Web Log

Filed under: howto-authentication, IAG

How to debug IAG SP2 KCD

Introduction Since IAG SP2, Kerberos Constrained Delegation (KCD) it handled at IAG level (not anymore at ISA level). Even if KCD logic remains the same, the approach to trace and troubleshoot is now different. The purpose of this document is to give...

Published Tue, Jul 21 2009 5:58 PM by Bienvenue, on Frédéric ESNOUF's Web Log

How to detect Skyrecon software in IAG

By default, IAG is capable of detecting a wide range of software on the client side. What happen if the software I want to check is not in the list ? I had that constraint with one of my partners, Skyrecon Here is the methodology we used : 1) asked the...

Published Tue, Jul 21 2009 1:43 PM by Bienvenue, on Frédéric ESNOUF's Web Log

Filed under: Howto-client, IAG

Extending client-side analyzis (example : Test Registry Key)

IAG is able to inspect your workstation and then later, per application, verify if you are compatible with the security policy. For example, you want to make sure that only “corporate” machine can access ApplicationA, but everybody (of course...

Published Tue, Jul 21 2009 1:18 PM by Bienvenue, on Frédéric ESNOUF's Web Log

Filed under: Howto-client, IAG

Tracing Client-side

When you connect IAG for the first time a “client” (in fact a bunch of sub components) are installed on the machine (there are other ways to install the client than online install). Later they will be loaded when needed when you connect IAG...

Published Tue, Jul 21 2009 12:22 PM by Bienvenue, on Frédéric ESNOUF's Web Log

Filed under: tracing, Howto-client, IAG

Display end-point detection variables on the client-side

When you connect an IAG portal, a client-side component will inspect your workstation and will take a “technical picture” of your machine. This “picture” will contain by default more than 200 checks and can be extended quickly to cope with your own security...

Published Tue, Jul 21 2009 12:21 PM by Bienvenue, on Frédéric ESNOUF's Web Log