cancel
Showing results for 
Search instead for 
Did you mean: 

What is FIPS and rewrite term?

SOLVED
aeroplane_
Regular Contributor

What is FIPS and rewrite term?

Hi

Could any one explains the terms FIPS and rewrite terms?

Thanks

1 ACCEPTED SOLUTION

Accepted Solutions
MattS_
Frequent Contributor

Re: What is FIPS and rewrite term?

FIPS stands for Federal Information Processing Standards. There are SAs available that meet the FIPS 140-2 level 3 security benchmark, these have a tamper-proof module that stores the private key for the SSL certificates. Chapter 41 of the Admin Guide has more details on it's operation. It is usually required for certain US government agencies who have strict security requirements.

Rewriting is a general feature of the SA and applies to web content. For core access to websites hosted internally, the SA acts as a proxy - the client connects to the SA URL and the SA retrieves the requested content for the client. As the links in the content from the website will refer to the websites hostname they need to be re-written so the client is directed to the SA if they click on them, otherwise the links in the content will fail.

View solution in original post

5 REPLIES 5
MattS_
Frequent Contributor

Re: What is FIPS and rewrite term?

FIPS stands for Federal Information Processing Standards. There are SAs available that meet the FIPS 140-2 level 3 security benchmark, these have a tamper-proof module that stores the private key for the SSL certificates. Chapter 41 of the Admin Guide has more details on it's operation. It is usually required for certain US government agencies who have strict security requirements.

Rewriting is a general feature of the SA and applies to web content. For core access to websites hosted internally, the SA acts as a proxy - the client connects to the SA URL and the SA retrieves the requested content for the client. As the links in the content from the website will refer to the websites hostname they need to be re-written so the client is directed to the SA if they click on them, otherwise the links in the content will fail.

aeroplane_
Regular Contributor

Re: What is FIPS and rewrite term?

Thanks. Could you please tell me in which scenario rewritten is not good or SSL VPN should not act as proxy?

Thanks

zanyterp_
Respected Contributor

Re: What is FIPS and rewrite term?

Unfortunately, there is no stone-set answer for strict web-based traffic. For items that require clients on the PC, you will need to use one of the tunneling methods offered; for anything with a server-initiated connection, Network Connect is required; for everything else, it is your call and what you want to provide users.

aeroplane_
Regular Contributor

Re: What is FIPS and rewrite term?

Thanks for the reply. Because I faced the issue that for oracle forums we need to use pass through proxy. Can you please explain what happend inside thats why rewritten is not good?

Thanks

zanyterp_
Respected Contributor

Re: What is FIPS and rewrite term?

The Jinitiatior service does not handle the rewriting information successfully; I don't know the details of why it does not handle the rewritten traffic. From what I have experienced, it tries to connect directly only and passthrough proxy allows a pseudo-direct connection using virtual hostname-based configuration.