Selection – Mapping templates

Mapping templates are used for rapid configuration of complex back-end applications with maximal security. A template is a mapping that is pre-configured with all the rules, exceptions and security settings required to get the application up and running. Select a template name to create a mapping based on that template.

Templates for Airlock Gateway

The mapping templates below are used for Airlock Gateway and allows to integrate them easily.

Name

Description

Medium Security Mapping

The starting point for integration of all back-end applications.

High Security Mapping

The starting point for back-end applications with critical data.

Templates for Airlock IAM

The mapping templates below are used for Airlock IAM to facilitate their integration.

Name

Description

Download Mapping Templates

Link to the source of the Airlock IAM Mapping Templates.

Custom mapping templates

The description below shows the necessary steps to make custom mapping templates available in Airlock Configuration Center.

Export a custom mapping on Airlock Gateway

  1. Sign in to Configuration Center as an admin.
  2. Go to:
    Application Firewall >> Reverse Proxy
  3. Select the mapping, which should become a custom mapping template on Airlock Gateway.
  4. Disconnect the virtual hosts and back-end group from the mapping.
  5. Click on the Export Mapping icon and save the file.

Deploy a custom mapping template

To deploy the previously exported mapping as a custom mapping template, copy it to the following folder on Airlock Gateway:

 
Example
/opt/airlock/custom-settings/mgt-agent/templates/<folder name>/<mapping template>
  • <folder name>:
    This folder is used in the Configuration Center to group the mapping templates.
  • <mapping template>:
    This is the mapping template exported previously.

The following naming convention is used for the folder name and the mapping template:

  • Dash:
    The first part of the name until the - will be cut away. If the name does not contain any “-”, nothing will be cut away.
  • File extension:
    The file extension must be .zip and will be cut away.
  • Underscore:
    The _ will be replaced with a space.

The custom mapping template will be available in the Configuration Center instantly. There are no further actions required after copying the file to Airlock Gateway.

Example:
The example below shows how custom mapping templates can be deployed on Airlock Gateway.

 
Example
/opt/airlock/custom-settings/mgt-agent/templates/10-Ergon/10-Airlock_IAM_Client_Certificate.zip
/opt/airlock/custom-settings/mgt-agent/templates/10-Ergon/15-Airlock_IAM_Frontside_Kerberos.zip
/opt/airlock/custom-settings/mgt-agent/templates/15-Opensource/10-Joomla.zip
/opt/airlock/custom-settings/mgt-agent/templates/15-Opensource/15-Typo3.zip
/opt/airlock/custom-settings/mgt-agent/templates/15-Opensource/20-PHP_MyAdmin.zip
 
Notice
  • Make sure that exported mappings are only used on equal or newer Airlock versions. It is not possible to use an exported mapping on an older Airlock system!
  • It is best practice to use numbers in “folder name” and “mapping template” (see example above). This way it is possible to place a group or custom mapping template on a specific place in the list.