Access Manager is not a firewall; it should be used with firewalls. Figure 5-1 illustrates a simple firewall set up for a basic Access Manager configuration of an Identity Server, an Access Gateway, and an Administration Console.
Figure 5-1 Access Manager Components between Firewalls
The first firewall separates the Access Manager components from the Internet, allowing browsers to access the resources through specific ports. The second firewall separates the Access Manager components from the Web servers they are protecting and the Administration Console. This is one of many configurations possible. This section describes the following: