Environment
NetIQ Access Manager 3.2 SP2
NetIQ Access Manager SSLVPN Service running on Access Gateway Server
NetIQ Access Manager SSLVPN Service running on Access Gateway Server
Situation
After updating to a working NAM 3.2.1 to NAM 3.2 SP2, the SSLVPN Logout URL failed - instead of logging the user out, a 404 message was displayed on the browser instead. Looking at the logout URL causing the 404, we could see that the user was being redirected to the right logout link, but on another proxy service instead.
Resolution
In Admin Console under Devices > Access Gateways > Edit > Advanced Options
In the AG Advanced Options include the following line.
Update the Access Gateways afterward:
NAGGlobalOptions NAGDisableExternalRewrite=on
In the AG Advanced Options include the following line.
Update the Access Gateways afterward:
NAGGlobalOptions NAGDisableExternalRewrite=on
Cause
Cross proxy rewriting was incorrectly being performed and the wrong proxy DNS name is getting appended with the logout link.