Home
Administering
This section describes how to plan for, install, configure, operate, and manage the SafeLinx Server.
Adding and configuring resources
After you complete the installation and initial configuration, continue to prepare the deployment by configuring other network resources.
Adding messaging services
Add messaging services to the SafeLinx Server to enable applications to send messages to messaging clients, such as a pager or a phone, over mobile wireless networks. Messaging services include support for short message service (SMS) delivery, and mobile-originated message delivery.
Application services
Add an application service resource to a messaging service to define direct, connection-based access to an internal application server.

Administering
This section describes how to plan for, install, configure, operate, and manage the SafeLinx Server.
- Overview
  HCL SafeLinx uses standards-based protocols to enable secure access from mobile computing devices outside the firewall to business applications and data on your organization's internal network.
- Security
  HCL SafeLinx includes a range of options for configuring the security of your network, applications, and data.
- Installation planning
  Before you install HCL SafeLinx, verify that you meet the hardware and software requirements, and that the network connections that you want to use are available.
- Installing and initial configuration
  Initial configuration and installation of HCL SafeLinx varies based on your operating system.
- Adding and configuring resources
  After you complete the installation and initial configuration, continue to prepare the deployment by configuring other network resources.
  - Types of resources
    Before a deployment can support client connections, you must add components to the SafeLinx Server. You use the SafeLinx Administrator to add and configure components. These components include resources to support HTTP access services, mobile access services, and messaging services, and resources to establish security and facilitate administration.
  - Defining a SafeLinx Server by using the SafeLinx Administrator
    Before you can define a SafeLinx Server, you must configure the access manager. If you connect to a SafeLinx Server and its access manager is not yet configured, a wizard leads you through the access manager configuration first. After that process completes, you can configure the SafeLinx Server.
  - Configuring a directory server
    You can configure the SafeLinx Server to retrieve user profile information from an external LDAP server. The directory server that you configure also provides information about how to contact other directory server services. After you configure a directory server, you can assign it to an LDAP-bind authentication profile to authenticate clients when they log in.
  - Securing communications between the SafeLinx Server and other nodes
    The SafeLinx Server and the services that it hosts exchange data with clients on the external network and with different types of servers on the internal network. To ensure the privacy of these communications, you can use TLS protocols to encrypt connections between the SafeLinx Server and other nodes.
  - Adding HTTP access services
    Add one or more HTTP access services to provide secure access to internal applications for remote users who do not have the full HCL SafeLinx VPN client (SafeLinx Client) installed.
  - Adding authentication profiles
    Add an authentication profile to specify how HCL SafeLinx authenticates users before it permits access to application servers. SafeLinx supports the following authentication methods: LDAP-bind, RADIUS, and certificate-based.
  - Adding a mobile access service
    If there is no mobile access service configured for the SafeLinx Server, you can add one.
  - Adding messaging services
    Add messaging services to the SafeLinx Server to enable applications to send messages to messaging clients, such as a pager or a phone, over mobile wireless networks. Messaging services include support for short message service (SMS) delivery, and mobile-originated message delivery.
    - Application services
      Add an application service resource to a messaging service to define direct, connection-based access to an internal application server.
    - Configuring an SMPP MNC
      Short message peer-to-peer protocol (SMPP) is based on the exchange of request and response protocol data units (PDUs) between the SafeLinx Server acting as an external short message entity (ESME) and the short message service center (SMS-C). The SafeLinx Server supports all PDU operations that are defined in the SMPP Specification Version 3.4.
    - Configuring a WCTP MNC
      Wireless Communications Transfer Protocol (WCTP) is a wireless device messaging protocol.
  - Adding users
    If your SafeLinx deployment does not use an external LDAP or RADIUS authentication server, use SafeLinx Administrator to create user accounts. You can add users individually or in a batch mode.
- Administering
  The SafeLinx Administrator administration client is the primary tool for viewing, adding, configuring, and managing HCL SafeLinx resources. Along with the SafeLinx Administrator, you can use the HCL SafeLinx Monitor to view information about packet flow through the SafeLinx Server. You can also use a set of command line tools to perform common SafeLinx Server tasks.
- Programming reference
  There are several programming considerations of which you might want to take advantage.
- Database schema information
  HCL SafeLinx uses a DB2, Oracle, or SQL database to store tables of information about current and past activity of SafeLinx Server sessions. The following tables are created and accessed by using the qualifier name wg for DB2 installations.

Application services

Add an application service resource to a messaging service to define direct, connection-based access to an internal application server.

Add an application service to define the protocol that is used for communications between an internal application server and the messaging service. The service definition identifies the port that is reserved for communication between an application on messaging client devices and the messaging service. Client applications include a specific set of header information inside the data stream. The messaging service uses this information to map the traffic to the internal application server. HCL SafeLinx supports the following application service type:

Generic

Provides traffic flow for applications between internal application servers and messaging client devices. Between the internal application server and the messaging service, the traffic flows over a UDP or TCP connection, or a secured TCP connection. Between messaging client devices and the messaging service, traffic flows over all MNCs, except SMTP, SNPP, or dial-based MNCs.

For example, a POP3 email client on a messaging device connects to the SafeLinx Server by using an SMS protocol. The messaging service converts the data stream to the UDP or TCP protocol and forwards the requests directly to the POP3 server. When responses are returned from the POP3 server, they are converted back to the SMS protocol and returned to the email client on the messaging device.

A generic application service can be configured to add client device identification information as a header to the application data stream. The application that receives the data stream is responsible for interpreting the header. For more information about the Messaging Services and Push Toolkit, see the Programming reference.

You can also configure generic applications services to run secure TCP transactions. Application services are available only as add-ons to an existing messaging service.

Rate this topic

5 stars 4 stars 3 stars 2 stars 1 star

Comment on this topic.

By clicking this box, you acknowledge that you are NOT a U.S. Federal Government employee or agency, nor are you submitting information with respect to or on behalf of one. HCL provides software and services to U.S. Federal Government customers through its partners immixGroup, Inc. Contact this team at https://hcltechsw.com/resources/us-government-contact. Do not include any personal data in this Comment box. Note: To report a problem or question about the product software, do not use this form. Instead, go to the HCL Software Support site.