Front cover - IBM Redbooks

590 Lotus Security Handbook
beneficial because it does not require the users to learn a new username and
password.
RedbooksCo implements the WebSphere Portal portlets for the new learning and
messaging capabilities, such that users can link directly to these new capabilities
from within the corporate portal enabled in the previous phase.
Figure 13-7 Lotus Learning Management System portlets
13.7 Stage 6: Further securing remote access
At this point, RedbooksCo has encrypted communications between users and
servers over the Internet and the private corporate LAN via SSL and the reverse
proxy solution. They also have a single corporate LDAP directory that controls
authentication names and passwords, and performs password management
functions like enforcing password length and password age rules. While this
system is quite secure, users are passed through the reverse proxy server to the
backend WebSphere Portal, Lotus servers, or both prior to being authenticated.
It is up to the backend systems to ensure authentication and access rights to
their services.
The RedbooksCo IT manager decides that he would like to identify whether
users are even allowed to pass through the reverse proxy before they are
allowed to communicate with the backend servers. He wants the reverse proxy to
be more than just a relay device, but a gatekeeper device as well. He decides to
implement an enterprise access control system via IBM Tivoli Access Manager
(TAM). The proper plug-in for the reverse proxy enables the reverse proxy to