Authentication using Trusted Front-End

You can configure the Standalone Sentry to be deployed behind a proxy, for example, an Apache or an F5 server. This allows for SSL termination to occur in front of Standalone Sentry even when using certificate-based authentication.

By terminating SSL in the DMZ, Standalone Sentry enables an added layer of security, as well as accommodates the DMZ firewall policies. Leveraging this configuration requires:

Setting up an Apache or F5 proxy to front-end the Standalone Sentry.

Additional minor changes to references to hostname in some profiles.

Contact Ivanti, Inc Professional Services or a certified partner to set up this deployment.