Install Appgate SDP¶
Appgate Software-Defined Perimeter (SDP) is a DoD-approved authentication service that enforces Zero Trust principles for secure network access. Managed by the Platform One (P1) Cloud Native Access Point (CNAP) team, Appgate SDP helps protect DoD networks by:
- Denying implicit trust for users, devices, and applications
- Enforcing a “verify-then-trust” approach
- Granting least-privilege access based on verified credentials
Appgate SDP is required to securely access Impact Level 4 (IL4) and Impact Level 5 (IL5) environments when connecting from a non-NIPRNet network — such as a commercial or public internet connection.
- IL4 environments: Require Appgate SDP
- IL5 environments: Require Appgate SDP and may also require running compliance scripts
Why Appgate SDP matters for Game Warden access
Game Warden relies on P1 CNAP and Appgate SDP to enforce access controls for IL4 and IL5 environments.
- Appgate, combined with DoD-approved security measures, ensures compliance with the Cloud Computing Security Requirements Guide (SRG) — particularly sections 5.10.1.x of SRG v1, Release 4.
- Without Appgate SDP (or a direct NIPRNet connection), you cannot reach Game Warden-hosted IL4+ environments.
How to install Appgate SDP¶
Prerequisites
- Multi-Factor Authentication (MFA) app
- Active P1 SSO account
- Government access card linked to your P1 account
- Compatible operating system (Windows, macOS, or Linux)
Download Appgate SDP Client for your operating system.
Install Appgate SDP on your machine, following the on-screen instructions.
- During installation, when prompted in the Create Profile window, select Use Profile Link.
- Copy and paste the following profile link into the Profile Link field:
appgate://connect.cnap.dso.mil/eyJwcm9maWxlTmFtZSI6IlBsYXRmb3JtT25lIC0gU1NPIiwic3BhIjp7Im1vZGUiOiJVRFAtVENQIiwibmFtZSI6InAxX3NwYSIsImtleSI6IjQ4ODUyMjc1OTk3YWE0YTkzNTdjYzA2OWYxYjNkNTI1ZGI3NWI2NTU1YjgzNGY3Njk3MDI0MzdlMGViNjg1NmMifSwiY2FGaW5nZXJwcmludCI6IjMxZTk4OTI2NGVmNDc0ZWU4ZTg3OGVhM2ZmM2M1NGQ3YzlhOTNkOWM4N2VlZmMyODFlMTM4NGJkZTIyYTZlYTEiLCJpZGVudGl0eVByb3ZpZGVyTmFtZSI6IlNTTyAtIFBsYXRmb3JtIDEifQ==
Click Submit to finalize the profile creation.
Connect to Appgate SDP:
- After profile creation, click Connect. A browser window will open to the P1 Login page.
- Authenticate using your CAC/ECA or P1 credentials and enter your MFA verification code when prompted.
- Accept the DoD Information System usage conditions.
Once authenticated, your Appgate SDP session becomes active, and your authorized environments will be displayed. You can now close the P1 window.
Manage your Appgate session¶
-
To sign out:
- Click the Options menu (⋮)
- Select Sign Out — this will deactivate the session but leave the client open
-
To quit Appgate:
- Select Quit from the Options menu — this will close the client entirely
-
To reconnect:
- Open Appgate SDP and click Sign in with Provider to launch the P1 login page
Important
You must keep Appgate SDP open and active while accessing IL4+ environments when connected via a non-NIPRNet network.
Support¶
If you experience issues installing or connecting with Appgate SDP, contact Platform One Support:
- Email: aflcmc.hncx.p1cst@us.af.mil
- P1 Customer Portal: Access Portal