Set Gateway Advanced Gateway settings

Advanced Gateway settings control traffic over your VPN network using worker threads to manage password authentication requests to the Password Agent, and client rate limiting to manage authentication requests to the RADIUS Agent from the same client IP address.

Set the advanced settings

1.      Click > Resources > Gateways. The Gateways page appears.

2.      Click next to the Gateway or Gateway Instance.

3.      Select Advanced Settings. The Advanced Agent Settings dialog box appears.

4.      In the Password Worker Threads field, set the number of worker threads for the Password Agent. Worker threads is the number of threads running on the Password Agent that are available to process password authentication requests.

5.      In the RADIUS Worker Threads field, set the number of worker threads for the RADIUS Agent. Increase this value to accommodate spikes in network traffic that may be causing timeout issues.

6.      Set the RADIUS Agent Message Queue Max Time. When a RADIUS message is received by the RADIUS agent, the message is queued until it can be processed by the RADIUS agent. The Message Queue Max Time is the maximum amount of time the message is queued. If it is not processed within the max time, the message is ignored.

7.      Select Client Rate Limiting Enabled to limit authentication requests to the RADIUS Agent from the same client IP address. The RADIUS application in IDaaS must be configured to receive the IP address from the VPN.

8.      Set the Client Rate Limiting Maximum Requests Per Second to the number of requests per second allowed to the RADIUS Agent.

9.      Set the Unknown User Cache Maximum Size to the maximum number of userIDs that can be stored in the cache. The cache prevents duplicate requests with unknown userIDs from being sent from the RADIUS Agent to IDaaS.

10.  Set the Unknown User Cache Expiry time to the amount of time a cache automatically expires when an unknown user attempts to access the RADIUS Agent.

11.  Click Save.