CA Access Gateway

Last published : Sep 03, 2026
CA Access Gateway is a scalable, manageable, and extensible stand-alone server that provides a proxy-based solution for access control. CA Access Gateway employs a proxy engine that provides a network gateway for the enterprise and supports multiple session schemes that do not rely on traditional cookie-based technology.
The embedded web agent enables Single Sign-On (SSO) across an enterprise. CA Access Gateway provides access control for HTTP and HTTPS requests and cookieless SSO. Also, the product stores session information in the in-memory session store. Proxy rules define how the CA Access Gateway forwards or redirects requests to resources located on destination servers within the enterprise.
By providing a single gateway for network resources, CA Access Gateway separates the corporate network and centralizes access control.
Note: SR-IOV interfaces (1/x and 10/x) that are part of a channel do not appear in the list of interfaces because channels are not supported on a CA Access Gateway instance. For more information about the features of CA Access Gateway, see the documentation for that product.

Provision a CA Access Gateway instance

Before you can provision a CA Access Gateway instance, you must download an XVA image. After you have downloaded the XVA image, upload it to the SDX appliance. Make sure you are using Management Service version 10.5 build 52.3.e or later on the SDX appliance. To provision a CA Access Gateway, first you need to upload the XVA image to the SDX appliance and then provision an instance.
To upload an XVA image to the SDX appliance:
  1. On the Configuration tab, navigate to CA Access Gateway > Software Images.
  2. In the details pane, under XVA Files, from the Action drop-down list, click Upload.
  3. In the dialog box that appears, click Browse, and then select the XVA file that you want to upload.
  4. Click Upload. The XVA file appears in the XVA Files pane.
To provision a CA Access Gateway instance:
  1. On the Configuration tab, navigate to CA Access Gateway> Instances.
  2. In the details pane, click Add.
  3. In the Provision CA Access Gateway wizard, follow the instructions on the screen.
  4. Click Finish, and then click Close.
After you provision the instance, log on to the instance and perform the detailed configuration.
To modify the values of the parameters of a provisioned instance, in the details pane, select the instance that you want to modify, and then click Modify. In the Modify CA Access Gateway wizard, set the parameters to values suitable for your environment.
Note:
If you modify any of the interface parameters or the name of the instance, the instance stops and restarts to put the change into effect.

Monitor a CA Access Gateway instance

The SDX appliance collects statistics, such as the version of SDXTools running on the instance, of a CA Access Gateway instance.
To view the statistics related to a CA Access Gateway instance:
  1. Navigate to CA Access Gateway > Instances.
  2. In the details pane, click the arrow next to the name of the instance.

Manage a CA Access Gateway instance

You can start, stop, restart, force stop, or force restart a CA Access Gateway instance from the Management Service. To complete these tasks, follow these steps:
  1. On the Configuration tab, expand CA Access Gateway.
  2. Navigate to CA Access Gateway > Instances.
  3. In the details pane, select the instance on which you want to perform the operation, and then select one of the following options:
    • Start
    • Shut Down
    • Reboot
    • Force Shutdown
    • Force Reboot
  4. In the Confirm message box, click Yes.