Back | Next | Contents Cams Web Agent Guide

IIS ISAPI Web Agent Integration

Cams web agents are integrated into web and application servers to protect the resources that they provide. When a user's web browser makes a request to a web or application server, the Cams web agent asks a Cams policy server if access is granted or denied. The Cams web agent enforces the response, including prompting for user authentication if required.

This document provides instructions on how to install and configure the Cams IIS web agent. The Cams IIS web agent is a Microsoft Internet Information Server (IIS) version 6 and 7 ISAPI filter and extension. The instructions that follow apply to all supported versions of Windows except where specifically noted.

NOTE: For known issues with the Cams IIS web agent, see ReleaseNotes.html found in the root directory of the Cams IIS web agent distribution.


These instructions guide you through the installation of Cams IIS web agent on a Windows system with IIS already installed. If IIS is not yet installed, you must first do so. You must also download the Cams IIS web agent.

The Cams IIS web agent is packaged in a zip file that contains documentation and the Setup.exe installer. Unzip the distribution into a temporary directory of your choice and double click on the Setup.exe file to begin the installation. The distribution files will install by default into:


WARNING: The installer defaults to the drive Windows is installed on (typically c:). You can install to another directory, however, you MUST use a directory path that does NOT contain any spaces. For example, do NOT use C:\Program Files\cams-webagent-iis. You must also preserve the Cams IIS web agent subdirectory structure.

You will also be given the option to install convenience Windows Start menu items to view the Cams Web Agent Guide and to open the cams-webagent.conf file. The final installer screen provides options that help you complete the installation:

  • View the documentation
  • Edit cams-webagent.conf
  • Launch the Internet Services Manager

After installing, open the Windows explorer to the directory where your installed the Cams IIS web agent. You should see the files and directories shown in Figure 1.

<!-- Cams IIS web agent documentation and license -->

<!-- Cams IIS web agent scripts and dlls files -->
cams\libapr-1.dll cams\libapriconv-1.dll cams\libaprutil-1.dll
cams\libcscore.dll cams\libcsconv_apr_1_0.dll
cams\msvcr100.dll <!-- Internationalization/Character conversion libraries --> cams\iconv\*.so <!-- Cams IIS web agent configuration files --> conf\ conf\cams-webagent.conf conf\ <!-- Cams IIS web agent log file directory --> logs\

Figure 1 - Directory listing of the Cams IIS web agent files after installation

NOTE: Setup.exe is provided for convenience in copying files, setting up Start menu options and configuring the Cams IIS web agent. You can also unzip the distribution to a directory of your choice and browse to the the configuration file, open the documentation and launch the Internet Services Manager.

Web Agent Configuration

The Cams IIS web agent is configured in the cams-webagent.conf file. In addition, you also need to use the Internet Services Manager to configure a filter and a cams virtual directory. This section describes the configuration requirements.

NOTE: To secure resources on your IIS server, you'll also need to configure a Cams security domain. See the Cams Policy Server Configuration section in this document for more information.

Editing cams-webagent.conf

Open the cams-webagent.conf file in a text editor. The file contains comments to help you understand the property values that you may need to change. You can also reference more detailed information on the properties in the Configuration Properties document.

NOTE: The most important properties are at the top of cams-webagent.conf. In most cases, the default property values will work if the Cams policy server and Cams web agent are on the same host. As you begin to integrate more web and application servers, reference Configuration Properties to understand the properties that will usually be the focus of your attention.

IIS 6 or IIS 7 Integration

IIS 6 and IIS 7 are different with respect to server architecture and administration. Choose the integration instructions applicable to your environment.

Back | Next | Contents