This chapter started by providing a complete overview of OAG. The fundamental OAG concepts, the component architecture and the different capabilities and features of the product were described.

The chapter continued by elaborating on the importance of implementing an API gateway in order to apply security policies to APIs that are publicly accessible. This provides critical protection against different external threats. We presented a typical use case with a brief description of why implementing OAG, along with different policies, would be beneficial for WBCV telecom rather than keeping their existing web security set up.

The later sections of the chapter provided hands-on and step-by-step instructions on how SOAP resources can be exposed as web APIs in a secure fashion, using different policies and by making use of policy filters. The chapter also provided steps on how to deploy and test the policies.