Requirements and Compatibility

This topic describes the supported versions of various technologies by the Layer7 API Gateway.
CGW10-0
To determine the compatibility of the current API Gateway version with other APIM products and features, see the APIM Product Compatibility Chart.
2

Platforms

API Gateway
Platform
Supported Versions
Hardware Appliance Gateway
CentOS 7.7
Virtual Appliance Gateway
CentOS 7.7
Software Gateway
Virtualization
Virtual Platform
Supported Versions
VMware ESXi/VSphere
6.5, 6.7
Best Effort Support for ESXi/VSphere 7.0
Version 7.0 of VMware ESXi/VSphere is considered “unsupported”, but for which Layer7-Broadcom will make a reasonable commercial effort to troubleshoot and/or resolve customer support requests if the customer operates the API Gateway on this particular platform.
The API Gateway does not support Oracle VirtualBox for virtualization.

Hardware Security Modules

Supported hardware security modules:
Manufacturer/Vendor
Supported Models
Supported Client Version
Entrust
  • nShield Connect+
  • nShield ConnectXC
  • nShield Solo+ (Oracle X7-2)
  • nShield Solo XC (Oracle X8-2)
Gateway version 10.0 base to 10.0 CR 2 has been tested by Broadcom Layer7 to support nShield client version 12.40.2.
Gateway version 10.0 CR 3 or newer has been tested by Broadcom Layer7 to support nShield client version 12.60.11. Users planning to upgrade to Gateway version 10.0 CR 3 MUST upgrade their nShield client version to 12.60.11.
Thales
SafeNet Luna SA
Gateway version 10.0 base to 10.0 CR 2 has been tested by Broadcom Layer7 to support Luna client versions 5.4.1 and 7.2.
Gateway version 10.0 CR 3 or newer has been tested by Broadcom Layer7 to support Luna client version 10.2 (i.e., the Luna  Universal Client). Users planning to upgrade to Gateway version 10.0 CR 3 MUST upgrade their Luna client version to 10.2
Gateway 10.0 CR 3 and Luna HSM Client v5.4.1
Although Thales has announced that it will be ending its sale of v5.4.1 in early 2020, Broadcom Layer7 will continue to provide best-of-ability support for customers who plan to continue with v5.4.1 of the client.
Luna HSM Client v5.4.1 is incompatible with Gateway version 10.0 CR 3.

Policy Manager

Policy Manager 10.0.x is required for Gateway 10.0.x.
Platform
Supported Versions
Windows
Supported: Windows 10
Tested: Windows 10
Linux
Red Hat Enterprise Linux 6
MacOS X
10.15.x
Other requirements:
  • A machine running one of the supported platforms for the Policy Manager listed above
    • Dedicated workstation recommended, to minimize security risks
    • When running the Policy Manager on Linux, AdoptOpenJDK must be properly installed and the JAVA_HOME environment set to the JDK installation directory path
    • When running the Policy Manager on Linux, a modern file system such as ext2/ext3 that supports full Linux file semantics instead of a FAT32/NTFS partition. The FAT32/NTFS partition does not allow uid, gid, and symlinks
Obsolete Feature
The browser client version of the Policy Manager is now obsolete for Gateway versions 9.4 CR3 and newer with AdoptOpenJDK.

Identity Providers

Identity Provider
Supported Versions
CA Single Sign-On (formerly "CA SiteMinder")
12.7
(Supported in v10.0 CR1)
12.8.03
(see note below for more details)
IBM Tivoli Access Manager (TAM)
6.1 (Support is deprecated)
Microsoft Active Directory (MSAD)
2012, 2016
OpenLDAP
2.4
Oracle Access Manager (OAM)
11g
CA Single Sign-On Compatibility
It is important to note the difference between the CA Single Sign-On Identity Provider and the CA Single Sign-On SDK:
  • The versions listed in the table above describe the versions of the CA Single Sign-On
    Policy Server
    that is supported when the Authenticate Against CA Single Sign-On Assertion is used to authenticate credentials.
  • The CA Single Sign-On
    SDK
    that is currently provided in the distribution archives (see Release Notes for the Layer7 API Gateway Techdocs site) is version 12.52 SP01 CR9, which is compatible with RHEL 6 and 7.
  • (Available in v10.0 CR1)
    The CA Single Sign-On
    SDK
    that is currently provided in the distribution archives is version 12.8.03, which is compatible with RHEL 6 and later.

Message Queuing Products

MQ Product
Supported Versions
IBM MQ Series
Supported: 8.0.0.5, 9.x
Tested: 8.0.0.5*, 9.x*
*Note:
Versions 8.0.0.5 and 9.x are tested and supported for MQ Native Queue only.
TIBCO EMS
6.1, 8.3
WebLogic JMS
11g, 12c
Apache ActiveMQ
5.15.10

FTP/SFTP

Product
Supported
Versions
vsftpd
3.0.2
Squid
3.5.20

Antivirus (ICAP) Products

The API Gateway is designed to support all ICAP-capable antivirus products or solutions. The latest released versions of the following  products are officially tested and supported by Layer7-Broadcom:
Supported Products
Symantec Antivirus Scan Engine
McAfee Web Security

UDDI Registry Products

Obsolete Feature
As of Gateway version 10.0, the UDDI standard is no longer supported.

Databases (JDBC Connector Only)

Product
Supported Versions
MS SQL Server
2016
IBM DB2
Supported: 8.x, 9.1, 9.5, 9.7 Tested: 9.7
MySQL
Supported: 8.0
Oracle
19c
Data Direct Driver
Supported:
  • 5.4.1 for all JDBC connected databases except for Oracle
  • 6.x for Oracle 19 Only
While the Data Direct driver claims support for a list of databases, the
Layer7 API Gateway
is actively tested on a small subset of that list. Support for issues may involve additional support from Data Direct.

Datastores

Non-SQL Based:
Product
Supported Versions
Cassandra
Supported: 2.1.2, 3.0.0, 3.9.0
Tested: 3.9.0
External in-memory:
Product
Supported Versions
Hazelcast
3.12.1

Miscellaneous/Other Products

Product
Supported Versions
EJBCA
4
1.7
MS Exchange Server
2010
Radius
2.1.7
Syslog
8.24.0
Apache Kafka
2.2
Third Party Products End of Support Statement
When a third-party product reaches the end of its primary or mainstream support, CA will no longer provide support for that third-party product or any API Gateway components that interoperate with the third party product. Third party products under extended vendor support are not supported by CA. Examples of third party products include but are not limited to: web server, application server, operating system, directory, database, container application platforms, etc.