134 Enterprise Business Portals II with IBM Tivoli Access Manager
4.9.2 Infrastructure
Figure 4-10 on page 135 depicts the implementation architecture of the proof of
concept phase based on the selected products.
WebSEAL machines are part of the Access Zone, and all incoming
HTTP/HTTPS Web requests from the Internet and intranet are directed to the
WebSEAL servers. WebSEAL is designed to protect all other Web servers and
application servers. Only authenticated users get access to the Web server zone.
The Web servers are placed in the Web server zone. In case of a successful
attack at this level, access to the application servers is still not possible.
Therefore, WebSphere Portal and all other applications are placed in the
application zone.