Juniper NETWORK AND SECURITY MANAGER 2010.3, Administration Manual

Page: 327 / 1016

3.
Click the ESAP link.
4.
Click the ESAP Download Page link.
5.
Navigate to the ESAP release you want.
6.
Upload the plug-in zip file to your computer.
Linking to an ESAP Package Shared Object
To create a link from a Secure Access or Infranet Controller configuration tree to a shared
object containing an ESAP package, follow these steps:
1.
In the Device Manager, double-click the Secure Access or Infranet Controller device
to open the device editor, and then select the
Configuration tab.
2.
Expand Authentication .
3.
Select Endpoint Security .
4.
From the Host Checker tab, select Endpoint Security Assessment Plug-Ins , and
then click the Add icon.
5.
In the New Endpoint Security Assessment Plug-Ins dialog box, enter an ESAP version
number.
6.
Select a shared binary object from the Path to Package list.
7.
Click OK once to save the link, and again to save the configuration.
Importing Third-Party Host Checker Policies
For Windows clients, you can create global Host Checker policies that take a third-party
J.E.D.I. DLL that you upload to the IVE and run on client machines.
Uploading a Third-Party Host Checker Policy
Follow these steps to upload a package definition file that the device will recognize:
1.
Name the package definition file
MANIFEST.HCIF
and include it in a folder named
META-INF
.
2.
Create a Host Checker policy package by creating a zip archive. Include the META-INF
folder that contains the MANIFEST.HCIF file along with the interface DLL and any
initialization files. For example, a Host Checker policy package might contain:
META-INF/MANIFEST.HCIF hcif-myPestPatrol.dll hcif-myPestPatrol.ini
3.
Upload the Host Checker package to the NSM shared object. You can upload multiple
policy packages to NSM shared objects, each containing a different
MANIFEST.HCIF
file.
277 Copyright © 2010, Juniper Networks, Inc.
Chapter 7: Managing Devices