Password Interceptor with Proxy

Identity Security Cloud (ISC) ISC Discussion and Questions
1

Hello guys,

Have any of you implemented Password Interceptor with a proxy? Without allowing the DC to communicate with the Sailpoint cloud?

Does the PWI communicate via a proxy or a Virtual Appliance? What challenges did you face with this?

2

Yes. Proxy Server on VA can be added to limit the number of outbound connections the password interceptor uses. It need to be done carefully in both VA and in the the AD. There are steps in the documentation. If you have done it correctly then there is no problem.

3

The PWI will communicate with the proxy server, and the proxy server will be responsible for communicating with the Sailpoint cloud, right?
When does the communication reach the VA? Only to synchronize the password with other endpoints, right? Via Sync Group.

4

We are in the same boat and followed the steps in this document @udayputta . currently requests are not routed from the VA proxy.

https://community.sailpoint.com/t5/IdentityNow-Connectors/Configuring-Sources-and-Virtual-Appliances-to-Support-the/ta-p/76693

Do we need to setup the proxy server as directed in this ?