Troubleshooting Configuration Issues
You can troubleshoot issues with outdated or missing information when configuring settings for:
-
Skyhigh Client Proxy (SCP)
-
SAML authentication
- Provisioned Tunnels
Information used to configure these settings has become outdated due to a legacy domain name that is still included here. Or it is missing as the current domain name is not specified where it is required.
Replacing an Outdated Domain Name Used to Configure SCP
When configuring Skyhigh Client Proxy (SCP), you need to specify a domain name for Secure Web Gateway. You cannot use the legacy wgcs.mcafee-cloud.com domain name here anymore, but need to replace it with the current name, which is wgcs.skyhigh.cloud.
Use the new domain name in combination with your customer ID. This is the ID you received from Skyhigh Security when you purchased Secure Web Gateway. It is specified with the letter c prefixed.
For example, replace:
c1234567.wgcs.mcafee-cloud.com
with:
c1234567.wgcs.skyhigh.cloud
Adding an Attribute with a New Value to Configure SAML Authentication
When configuring SAML authentication, you need to specify a URL for the Identity Provider (IDP) service that is involved in the authentication process. This URL is part of the IDP metadata. It is also referred to as ACS URL.
The ACS URL is specified as an attribute value when configuring SAML authentication. This value is currently:
https://saml.wgcs.skyhigh.cloud/saml
To ensure this value is used in your configuration, remove the existing configuration that you set up for SAML authentication and create a new configuration, where you specify the above URL as part of the IDP metadata.
Replacing an Outdated Domain Name Used to Configure Provisioned Tunnels
When configuring Provisioned Tunnels, you need to specify a domain name for Secure Web Gateway.
You cannot use the legacy wgcs.mcafee-cloud.com domain name here anymore, but need to replace it with the current name, which is wgcs.skyhigh.cloud.