According to the Web-IT Workflow in the below post, when a user clicks an application icon in Web Access, a mini-PIT file containing a URL pointing to a connection PIT file is generated and returned to the browser.
My question is, if the Web Access server is behind a load balancer and accessed using a virtual hostname, is it the virtual hostname that is used in the URL or is it the actual hostname of the WA?
If it is the virtual hostname, does this mean that session affinity must be applied by the load balancer to ensure the client is always directed to the WA hosting the connection PIT file?
The URL specified on the Firewall/SSL VPN page is used to retrieve the PIT file.
The Web Config is unique per server so each server can have it's own URL specified here.
This means it is up to you how you specifiy it.
Method 1, The URL on each Web Server points to the Load Balancer
Advantage: Only a single Certificate is needed
Disadvantage: Without session affinity, you might be sent to a different Webserver where the PIT file does not exist and the connection attempt will fail.
Method 2. The URL on each Web Server points to it's own hostname
Advantage: User always get sent to the correct server to retrieve PIT file
Disadvantage: If using SSL, you'd need to have a valid certificate for the Load Balancer address and each host address
It depends where you're getting stuck but the easiest option may be to raise a Case with Support as it is much easier to sort out these issue over a Webex
DELL-Andrew W1
378 Posts
332
0
Posted January 24th, 2011 20:00
Hello,
The URL specified on the Firewall/SSL VPN page is used to retrieve the PIT file.
The Web Config is unique per server so each server can have it's own URL specified here.
This means it is up to you how you specifiy it.
Method 1, The URL on each Web Server points to the Load Balancer
Advantage: Only a single Certificate is needed
Disadvantage: Without session affinity, you might be sent to a different Webserver where the PIT file does not exist and the connection attempt will fail.
Method 2. The URL on each Web Server points to it's own hostname
Advantage: User always get sent to the correct server to retrieve PIT file
Disadvantage: If using SSL, you'd need to have a valid certificate for the Load Balancer address and each host address
Kind Regards, Andrew.