5.7 Advanced Access Gateway Service Options

The following settings apply to all reverse proxies, unless the option is overwritten by an advance proxy service setting (see Section 1.1.3, Configuring Advanced Options for a Domain-Based Proxy Service).

  1. In the Administration Console, click Devices > Access Gateways > Edit > Advanced Options.

  2. To activate these options, remove the #symbol, configure the value, save your changes, then update the Access Gateway.

    #NAGGlobalOptions FlushUserCache=on: Specifies whether cached credential data of the user is updated when the session expires or the user changes an expiring password.

    • When it is turned on, which is the default setting, credentials and the Identity Injection data are refreshed.

    • When it is turned off, the cached user data can become stale. For example, if your password management service is a protected resource of the Access Gateway and this option is turned off, every time a user changes an expiring password, the user’s data is not flushed and the Access Gateway continues to use stale data for that user.

    #NAGGlobalOptions DebugHeaders=on: When this option is enabled, an X-Mag header is added with debug information. The information can be seen in sniffer traces and with plug-ins such as ieHTTPHeaders, Live HTTP Headers, and FireBug. This option should only be enabled when you are working with Novell Support and they instruct you to enable the option.

    #NAGGlobalOptions DebugFormFill=on: When this option is enabled, additional debug information related to the processing of a Form Fill policy is added to the Apache error_log file. The Form Fill entries generated by this option begin with a FF: marker.

    #NAGGlobalOptions NoURLNormalize=on: When this option is enabled, it disables the URL normalization protection for back-end Web servers. This option resolves issues in serving Web content from Web servers that have double-byte characters such as Japanese language characters.

    #NAGAdditionalRewriterScheme=webcal://: When this option is enabled, the rewriter rewrites URLs that have a scheme of webcal://. The default rewriter configuration only rewrites URLs with a scheme of http:// or https://.

  3. To disable an option, add the pound (#) symbol in front of the option, save your changes, then update the Access Gateway.