Data Center Appliance (DCA) Overview

Trust Lockdown Service Architecture

System Components

The Trust Lockdown DCA consists of 4 components:

• an Application Server Cluster
• a MySQL Database
• a Network File Storage (NFS) shared filesystem
• an email gateway

Application Server Cluster

The Trust Lockdown Service consists of a cluster of web application servers that procees App Approval Requests from Endpoint devices via HTTPS.

The Application Service can use a single domain name: - wcs.dca.domain.tld

or provide two sub domain names, one for endpoints and the other for admins: - ep.dca.domain.tld - admin.dca.domain.tld

Using two separate subdomain names ensures that the requests being serviced for protection is not disrupted by admin access to the service cluster.

Application Service Functionality

This web application service controls:

• Zero-Trust App Security on each endpoint device
• Zero-Trust Admin Access for App Policy and Endpoint Management
• Zero-Trust Account Access to Security Events, Endpoint Status and Reports
• App Policy Violation Monitoring
• Reports on System Activity
• Syslog Event generation for Remote System Monitoring