Microsoft RMS and Security Gateways

A new use case has just been published that shows how a large Enterprise has deployed Expressway Service Gateway to protect access to RMS-protected documents.

This is an interesting use case because it show how an Enterprise can provide secure, protected access to Microsoft RMS protected documents even when the partner identities are stored in CA Siteminder – the answer is to utilize a security gateway to provide a layer of protection, authentication, and credential mapping. It also provides a nice way to segment the network for security purposes. If partner access needs to be shut down due to increased risk, it can be done at the gateway rather than fiddling with code.

In many cases this same authentication could happen with ADFSv2, but what happens when ADFSv2 isn’t an option in the DMZ?

Another cool aspect of this use case is that the partner clients are thick office clients sending in web services requests, which I thought was interesting.

How to move data from JMS to a database with SOA Expressway

The work of an information system’s developer is not only to create challenging, innovative advances in algorithms in new applications. His/her tasks also  include the creation and maintenance of support routines like the reliable copying of data from one source to another, and handling different exceptions, timeouts, hanging transactions, shifting timezones, etc. You’re lucky if all software in your system is from a single vendor and is still supported. In this case it’s likely that there are tools that can move data from one source to another, for example, from a database to a message queue. But if your task is to move data between IBM Websphere MQ with SSL-encrypted channels, MS SQL or Oracle databases and Tumbleweed FTP server, you’re likely to come across some vendor-specific implementation issues. Even if the  working prototype is finished in several days, it’ll take some more time to test it before it can be used in production.

One of possible use cases of SOA Expressway (www.dynamicperimeter.com) is rapid creation of this type of support workflow.  And SOA Expressway can execute tens of such workflows at once

Read Anton Luht’s blog about how to easily accomplish this:

http://software.intel.com/en-us/blogs/2010/10/20/how-to-move-data-from-jms-to-a-database-with-soa-expressway/

 

Securing Oracle* Fusion Middleware with Microsoft* Active Directory

Read Allen Shortnacy’s interesting post about how to leverage an existing Identity Management asset such as Microsoft* Active Directory along with Intel® SOA Expressway in order to bring authentication and authorization to your Oracle* Fusion Middleware SOA implementation.

People at Microsoft Tech Ed watch a demonstration of how SOA Expressway provides security for Microsoft environments

Watch Blake Dournaee, the product manager for SOA Expressway, Intel’s Service Gateway product in this really interesting demo.  Blake shows a crowd of people at Microsoft Tech Ed how SOA Expressway can be deployed at the edge of an enterprise,  protecting services deployed on Microsoft .NET with access to Java environments. In the demo, there are services running as SOAP services that will be exposed as REST services to an external business partner. The gateway will perform message level security and authentication against Active Directory Federation Services 2.0  as well as LDAP. Pretty cool stuff…

http://www.dynamicperimeter.com/download/Intel_MTE-SOA-BlakeDemo