Deep dives — WALLIX product internals

Detailed technical study of WALLIX Bastion, Access Manager, and the wider product family, going beyond the product portfolio overview. This is the core material for the WCP-P and WCE-P certifications. Sourced from the official WALLIX Bastion Administration Guide (served v12.3.2), Access Manager Guide (v5.2.4.0), and Deployment Guide (v12.0.2).

Page	Focus	Cert level
Bastion architecture	Proxy/gateway model, front-leg vs back-leg, internal services, deployment	WCP-P
Bastion data model	The ACL objects (user/target/authorization…) with a worked example	WCP-P
Session management	Proxies & sub-protocols, recording, OCR, Session Probe, monitoring, approval	WCP-P
Secrets & password management	Vault, check-out/check-in, rotation, plugins, external vaults, AAPM/WAAPM	WCP-P
Authentication & Access Manager	Auth methods (LDAP/Kerberos/SAML/OIDC/X.509/2FA), WAM as HTML5 gateway	WCP-P / WCE-P
High availability & DR	DB replication over autossh, Master/Slave & Master/Master, failover	WCE-P
REST API & automation	API auth, resources, curl examples, IaC, CI/CD secret retrieval	WCE-P
Troubleshooting & logs	Log locations, common issues, plugin debugging, SIEM, support process	WCE-P
PAM4OT — Operational Technology	Bastion applied to OT/ICS: the OT universe, Purdue model, industrial protocols, the 3 architectures, ISA/IEC 62443	eWCP-P-OT

Beyond Bastion — the wider WALLIX product family

Page	Focus	Relates to
IDaaS / Trustelem	SSO, MFA, SCIM, directory connectors	eWCP-I / WALLIX One IDaaS
IAG — Identity & Access Governance	Governance, Joiner-Mover-Leaver, SoD, recertification, PAG	eWCP-G
EPM / BestSafe	Endpoint privilege (PEDM), anti-ransomware, local-account rotation	the EPM product (no current cert)
WALLIX One & integrations	The SaaS platform + SIEM / ITSM / IdP / external-vault integrations	all tracks

💡 New to the concepts? Read foundations and prerequisites first. Practice with hands-on exercises.