NOTE:Do not apply the configuration changes from Administration Console to devices during peak system usage times.
Purge List Now/ Purge Cache: Causes a process level restart and terminates all the existing connections and downloads. The users do not need to reauthenticate, but issuing a purge list or cache command might result in a higher load on the service provider. If there is a single gateway, issuing a purge list or cache command can cause temporary service disruption for users.
Stop: Stops the proxy component in Access Gateway Appliance, makes it unavailable for user requests and terminates all the existing connections and downloads. The users do not need to reauthenticate, but stopping the proxy component can result in a higher load on the identity provider and other gateway cluster members.
Restart: Triggers a restart of the operating system of Access Gateway Appliance, where all existing connections and downloads are terminated. The users do not need to reauthenticate, but restarting the operating system can result in a higher load on the identity provider and other gateway cluster members.
Service Provider > Restart: Causes the ESP and proxy to clear the user session information and refresh the policy information. Access might be denied to protected resources and resources that need policy evaluation during the restart process.
Service Provider > Stop: Causes the ESP and proxy to clear the user session information. You cannot access the protected resources and resources that need policy evaluation.
Rewriter Profile Change: Changing the rewriter profile causes Administration Console to issue a purge cache command to Access Gateway. Issuing a purge cache command causes a process level restart and terminates all the existing connections and downloads.
Accelerated Web Service Change: Changing the accelerated web server details causes Administration Console to issue a purge cache command to Access Gateway. Issuing a purge cache command causes a process level restart and terminates all the existing connections and downloads
Service Creation: If your gateway cluster is behind an L4 switch, ensure that you review or modify the L4 configuration to reflect any new service that you can create.
TCP Connect Options: Increasing the Data Read Timeout values or the Idle Timeout values impacts the user experience if the web servers are unreachable. Disabling the persistent connections also impacts the user experience.
Date and Time: Changing date and time or the NTP server configuration impacts the existing user session timeout values. It is critical to keep the time settings in Access Gateways and Identity Servers synchronized in order to prevent authentication failures and unexpected session times out. There is no other impact than authentication failures and unexpected session times out.
Audit Configuration Changes or Audit Server Health: If the audit server is busy or unreachable, it causes a delay in browsing, including Administration Console access. There is no other impact than delay in browsing and accessing Administration Console.
Network Related Changes: Be cautious in making changes to the network parameters like Adapter, IP address, Netmask, Gateways, DNS, Hosts, and Route. The users can be impacted by these changes because the connections are reset; however, user reauthentication might not be required. Incorrect configuration leads to system inaccessibility on the network and you cannot access Access Gateway Service.
You must not change security setting options during the peak system usage hours.
Signing: Before changing it, ensure that Identity Server trust store contains the root CA certificate and possible intermediate CA certificates to complete the trust chain.
Trust Store: Before changing it, ensure that you have all the root CA certificates and possible intermediate CA certificates to complete the trust chain to trust any certificates used by Identity Server.
Cache Options: Be cautious in making changes to the cache options. Changing cache options can impact the performance of your Access Manager system. You might see an increase or decline in Access Gateway performance, depending on the changes made to the cache options.