1.4 Differences Between Access Manager and Access Manager Appliance

The following table lists differences between Access Manager 3.2 and Access Manager Appliance 3.2:

Features

Access Manager Appliance

Access Manager

Installation

All the components, such as the identity provider, Access Gateway, and SSL VPN, are installed on a single machine.

Each Access Manager component such as the identity provider, Access Gateway, and SSL VPN, can be installed on different machines.

To deploy the existing solution in a cluster mode, at least 6 machines are required.

Duration of Installation

Automates several configuration steps to quickly set up the system.

Usually takes more time to install and configure each component.

User Input Options

Access Manager Appliance is a software appliance. It takes only a few parameters as input. Several options assume default values.

The user interface has several options, so you need to have a good understanding of all the components.

Installation and Configuration Phases

The installer takes care of configuration for each component. The product is ready for use after it is installed.

Separate installation and configuration phases for each component.

After installation, each Access Manager component needs to be separately configured.

Mode of release

Access Manager is released as a software appliance.

Delivered in binaries.

 

The Administration Console, Identity Provider, and SSL VPN are accelerated by Access Gateways. Only one open port, - port 443 - is required in the firewall to deploy Access Manager Appliance. Having only one open port in the firewall enhances security.

Multiple ports need to be opened for deployment.

Certificate Management

Certificate management has been simplified. To replace or renew certificates, the administrator updates only one place, which internally updates all certificates and key stores.

The administrator needs to make changes at multiple places to change certificates.

Default Portal

After a successful installation, a default portal is ready for administrator reference. The administrator can access the default portal using the http://hostname URL. This portal provides detailed information of Access Manager Appliance usage.

 

Ready-made Access Manager

The following configuration is internally done when Access Manager Appliance is installed:

  • Importing Identity Provider, Access Gateway, and SSL VPN components.

  • Automatic clustering of Identity Provider, Access Gateway, and SSL VPN components.

  • Automatic configuration of Identity Provider and bringing it to the green state.

  • Automatic configuration of Access Gateways and associating them with an identity provider.

  • Automatic configuration of SSL VPN and bringing it to the green state.

  • Automatic service creation to accelerate the identity provider, Administration Console, and portal.

Because the configuration is internally taken care of, the administrator only needs to link the user store and Web servers to accelerate his Web servers through Single Box.

The administrator needs to manually configure each component to bring up the system for use.

System Configuration through Administration Console

Administration Console is the single point of reference to configure all the components in the Access Manager Appliance.

 

64-bit Support

For better performance and scalability, a 64-bit support has been provided for all components.

Not all components provide 64-bit support.

Platform Upgrade

All the components are supported on the latest Tomcat 7 and Java 1.7.0_04 versions.

All components are supported on Tomcat 7 and Java 1.7.0_04.

NOTE:Clustering is not supported between Access Manager components and Access Manager Appliance.