Reflection for Secure IT Gateway Architecture

The diagram and table below summarize the components of a Reflection Gateway installation.

Component

Description

Transfer Client

SFTP client

Required for Transfer Sites

Transfer Site users can transfer files using either the web-based Reflection Transfer Client or any alternate SFTP client that is available on their system.

Gateway Proxy

Required for Transfer Sites. Not used by Jobs

The Gateway Proxy system runs two services that must be installed together–the Reflection Transfer Server and the Reflection Secure Shell Proxy.

Gateway Administrator

Required for all Reflection Gateway installations.

Provides an HTML based configuration UI, provides web services to authenticate users and provides access to data. Also interfaces with existing LDAP, MySQL and Email servers.

Reflection Hub

Required for Jobs. Not used by Transfer Sites.

Makes connections to SFTP servers and executes the Job actions defined in the Gateway Administrator.

SFTP servers

Required for Jobs. Optional for Transfer Sites.

Configure connections to one or more SFTP servers. Jobs and Transfer sites can use the same server or different servers. No added SFTP server is required for Transfer Sites if you use the Reflection Gateway Proxy as the Transfer Site file server.

The Reflection for Secure IT Gateway installer includes the Reflection for Secure IT Server for Windows. Each Reflection Gateway license entitles you to install this SFTP-enabled server on one system. Contact Micro Focus for information about purchasing additional Reflection for Secure IT Servers for UNIX or Windows.

MySQL database

Optional

Gateway Administrator installs and uses a HyperSQL database by default. The default database is created on the same system as Gateway Administrator. For production environments that require high availability, configure Gateway Administrator to use a MySQL database, which can run on a remote server.

LDAP directory

Optional

In addition to adding users to the built-in ReflectionGateway list, you can provide users with access to Transfer Sites or the Gateway Administrator by configuring user authentication from an external LDAP directory

SMTP email server

Optional

Email notifications are commonly used in both Jobs and Transfer Sites. To support this, configure Gateway Administrator to connect to an email server.