Selection – Mapping templates

Mapping templates are used for rapid configuration of complex back-end applications with maximal security. A template is a mapping that is pre-configured with all the rules, exceptions and security settings required to get the application up and running. Select a template name to create a mapping based on that template.

Templates for Airlock Gateway

The mapping templates below are used for Airlock Gateway and allows to integrate them easily.

Name	Description
Empty Mapping	The starting point for integration of all back-end applications except the ones listed below.

Templates for Airlock IAM

The mapping templates below are used for Airlock IAM to facilitate their integration.

Name	Description
Download Mapping Templates	Link to the source of the Airlock IAM Mapping Templates.

Templates for Microsoft Products

The mapping templates below are used for Microsoft products and allows to integrate them easily. Product- and version-specific integration manuals are found on Techzone.

Name	Description
Exchange 2016 Outlook Web Access	Enable high-security protection of Outlook Web Access (OWA) through Airlock Gateway.
Exchange 2016 Outlook Anywhere	Allow Outlook to securely access Exchange through the Internet, using RPC over HTTP(S).
Exchange 2016 ActiveSync	Secure synchronization between Exchange and mobile clients.
SharePoint 2016	All recommended settings to protect a SharePoint server.

Exchange 2019 OOTW	Enable high-security protection of Outlook on the Web (OOTW) through Airlock Gateway.
Exchange 2019 Outlook Anywhere	Allow Outlook to securely access Exchange through the Internet, using RPC over HTTP(S).
Exchange 2019 ActiveSync	Secure synchronization between Exchange and mobile clients.
SharePoint 2019	All recommended settings to protect a SharePoint server.

WebDAV for IIS	All recommended settings to protect a WebDAV for IIS.

Custom mapping templates

The description below shows the necessary steps to make custom mapping templates available in Airlock Configuration Center.

Export the custom mapping on Airlock Gateway

1.
Sign in to Configuration Center as an admin.
2.
Go to Application Firewall - Reverse Proxy and select the mapping, which should become a custom mapping template on Airlock Gateway.
3.
Disconnect the virtual hosts and back-end group from the mapping.
4.
Click on the Export Mapping icon and save the file.

Deploy custom mapping template

To deploy the previously exported mapping as a custom mapping template, copy it to the following folder on Airlock Gateway:

/opt/airlock/custom-settings/mgt-agent/templates/<folder name>/<mapping template>

1.
<folder name>: This folder is used in the Configuration Center to group the mapping templates.
2.
<mapping template>: This is the mapping template exported previously.

Naming convention:
The following naming convention is used for the folder name and the mapping template.

1.
Dash: The first part of the name until the - will be cut away. If the name does not contain any "-", nothing will be cut away.
2.
File extension: The file extension must be '.zip' and will be cut away.
3.
Underscore: The _ will be replaced with a space.

The custom mapping template will be available in the Configuration Center instantly. There are no further actions required after copying the file to Airlock Gateway.

Example:
The example below shows how custom mapping templates can be deployed on Airlock Gateway.

/opt/airlock/custom-settings/mgt-agent/templates/10-Ergon/10-Airlock_IAM_Client_Certificate.zip
/opt/airlock/custom-settings/mgt-agent/templates/10-Ergon/15-Airlock_IAM_Frontside_Kerberos.zip
/opt/airlock/custom-settings/mgt-agent/templates/15-Opensource/10-Joomla.zip
/opt/airlock/custom-settings/mgt-agent/templates/15-Opensource/15-Typo3.zip
/opt/airlock/custom-settings/mgt-agent/templates/15-Opensource/20-PHP_MyAdmin.zip

●
Make sure that exported mappings are only used on equal or newer Airlock versions. It is not possible to use an exported mapping on an older Airlock system!
●
It is best practice to use numbers in "folder name" and "mapping template" (see example above). This way it is possible to place a group or custom mapping template on a specific place in the list.