Safeguard SPP high availability on Azure

Hi,

I have three nodes installed on Azure for a customer, and I need to implement a virtual IP that exposed the shared access to the cluster (using https://sppalias.domani.local).

Question 1 - If I have understood well while reading documentation, SPP cannot exposed a virtual IP by itself, but it needs in front a load balancer. Is it right ?

Question 2 - How can I implement high availability on Azure ? Only using Azure Load Balancer or is it there another native solution ?

Thanks

Alessandro

0 Tawfiq.Ahmad over 1 year ago

Hi Alessandro,

1. Yes that is correct for User login load balancing, you would need to setup a VIP address and use a network load balancer outside SPP.

Here is the KB that references the URL that the load balancer would monitor to verify that the SPP node is online and route traffic based on that status:
https://support.oneidentity.com/one-identity-safeguard-for-privileged-passwords/kb/266594/is-it-possible-to-monitor-the-health-state-of-a-safeguard-appliance-using-a-web-page

2. SPP cluster provides high availability (for example: In a 3 node cluster, if one node fails, users can still access the other two nodes for requests, otherwise if two nodes fail then 3rd node can be used if Automatic offline workflow is enabled)

Please refer to the admin guide section here:
https://support.oneidentity.com/technical-documents/one-identity-safeguard-for-privileged-passwords/6.13.1/administration-guide/125#TOPIC-1778180

For implementation assistance, we recommend engaging One Identity Professional Services team.

Thanks!
Cancel
Up 0 Down

Reply

Verify Answer

Cancel

Endpoint Privilege Management

Safeguard SPP high availability on Azure