Configuration - PingAccess - 7.0

String value containing the path to the certificates extracted from the .properties files.

Determines whether the agent is enabled or disabled for a specific server configuration. Valid values: on/off

This value can be set globally; set for individual virtual hosts, directories, locations, or files; or both. The most specific value is used.

<VirtualHost *:81>
    <Location /pa>
        PaaEnabled on
    </Location>
    <Directory "/var/www/html/one">
        PaaEnabled on
    </Directory>
</VirtualHost> context root
                                    and for the 

<VirtualHost *:81>
    <Directory "/var/www/html/two">
        PaaEnabled off
       <Files "page2.html">
            PaaEnabled on
       </Files>
    </Directory>
</VirtualHost>

List of .properties files that store configuration data used to connect the agent to the PingAccess engine nodes the agent will communicate with.

An optional parameter which defines a note name. If a request includes a note with this name and a value of on or off, this value overrides the PaaEnabled setting for that request.

If you want to use this feature, you must deploy a custom module to include this note with the correct value.

agent.engine.configuration.failover.hosts

The hostname and port of the PingAccess server where the agent should send requests in the event of a failover from the PingAccess host.

Defined in the PingAccess Admin UI

agent.engine.configuration.failover.failedRetryTimeout

Seconds before retrying a failed PingAccess server.

60

agent.engine.configuration.failover.MaxRetries

The maximum number of retries before considering a PingAccess server unavailable.

2

AUTO

The AUTO cache type determines the appropriate cache to use based on the number of worker processes. If the number of worker processes is 1, or 16 or above, the agent uses the STANDALONE cache. If the number of worker processes is between 2 and 15, the agent uses the ZMQ cache.

STANDALONE

The STANDALONE cache type does not share policy cache entries across worker processes.

ZMQ

The ZMQ cache type allows the agent to share policy cache entries across all worker processes using ZeroMQ for inter-process communication.

Determines whether the vnd-pi-agent agent inventory header is sent along with each request to the PingAccess policy server.

This header contains the following fields:

v

The PingAccess agent version.

t

The type of PingAccess agent retrieved using the ap_get_server_description function.

h

The hostname of the PingAccess agent retrieved using the ServerName directive.

For more information, see Agent inventory logging.

true

Specifies additional values to include in the vnd-pi-agent agent inventory header.

The following syntax is used.

agent.inventory=exampleheader=TEST;exampleheader2=TEST2;

Not present by default.

If present, specifies a header that overrides the default X-Forwarded-Host header. This header communicates the authority component of the effective request URL on the protected application.

Not present by default.