SHIELD Edge Link Function Specification

SHIELD Edge Link is

• Access Control Service (IAP)
• Relay Proxy Service (In/Outbound)- The basic Proxy performs both Inbound and Outbound roles.
• Desktop/Console Remote Access

It consists of a total of 3 main services, each responsible for functions such as user authentication and access control, internal↔external communication relay, and remote access.

Access Control Service (IAP)

This is a service that provides user authentication-based access control, JWT token validation, and ZTCAP policy application. After validating external user requests through user authentication and conditional policy verification, it allows safe access to internal systems.

number	Major Category	Mid-category	Subcategory	Description	Note	Document Link
1	User Authentication Management	IAP Certification	Performing Basic Authentication Procedure	When external users access, perform user account authentication through IAP (SSO, OAuth, etc.)
2		Conditional Policy	Conditional User Authentication Policy	Strengthening user authentication based on conditions such as access location, time, and session management.
3	Internal Access Target Management	Internal Work System Registration	Enter connection target information	- Customer business system address (internal network URL/IP) input - Subdomain (external access address) designation - Select Connection Relay Server (Edge Server) - Write a description (note)
4			Modify Connection Target	Change of access information for the existing registered internal system Modify Internal Address, Subdomain, and Connection Server
5			Delete Connection Target	Delete access information for discontinued systems
6	Connection List Management	View Connection List	View All Registration Details	External connection address, internal actual address, connection relay server, status display
7		Filter/Search	Conditional Search	System name, subdomain, available for inquiry by status
8		Status Check	Check the status of the relay server (Edge)	- active: The authentication information connected to the server is valid and in a connectable state - Inactive: Authentication information has expired or been invalidated, making access impossible. It is not a value set directly by the administrator, but rather the system automatically reflects the status.
9			Live Status Check	Check server connectivity in real-time when the Live button is clicked.
10	Access History Management	Log Management	User Access History Management	Record and manage internal system access history Statistics inquiry (by user / by URL), check block history available

Relay Proxy Service (In/Outbound)

The basic Proxy is a relay proxy service that performs both Inbound and Outbound roles.

number	Major Category	Mid-category	Subcategory	Description	Note	Document Link
1	Connection Relay	External → Internal Relay	Connection Request Relay	Securely relay external user access requests to internal systems
2		Internal → External Relay	Connection Request Relay	Safely relay external access requests from internal users to external systems
3			Registration/Deletion of Relay Server IP	Registering or Deleting Public IP for External Access
4	Access Control	URL Access Control	Allow/Block URL Settings	Registering and Managing URLs for Allowing External Access
5			ACL Rule Management	Setting and Managing Access Allow/Deny Rules
6	Access Logging	Log Management	Access Log Record	Internal ↔ External Access History Record and Management
7			Log Inquiry	Access Log View and Search

Desktop / Remote Console Access (To be provided)

It is a built-in service of SHIELD Edge Link that provides remote access features such as SSH and RDP in a browser-based format.

number	Major Category	Mid-category	Subcategory	Detailed description	Note	Document Link
1	Remote Access	Accessing Company PC	Remote Desktop Access	Provides access functionality to remotely control the company PC screen through a web browser.
2		Accessing the internal server	Remote Console Access	Providing a console access environment to input commands to the internal server through a web browser