Juniper NETWORK AND SECURITY MANAGER, Manual

Page: 163 / 340

Table 34: Secure Application Manager Resource Policy Configuration
Details
(continued)
Your Action Function Option
Select one of the following options from the
drop-down list.
• Allow socket access —Allows access to
the application servers specified in the
Resources list.
• Deny socket access —Denies access to
the servers specified in the Resources list.
• Detailed Rules –Allows you to specify one
or more detailed rules for this policy.
Allows or denies access to the
servers specified in the resources
list. Action
Role Selections tab
Select a role and click Add to add roles from
Non-members to Members list.
Maps roles to access resources.
NOTE: This tab is enabled only
when you select
selected or
Except those selected from the
Applies to the role drop-down list.
Role
Selections
Detailed Rules tab
Enter a name. Specifies the detailed rule name.
NOTE: The Detailed Rules tab is
displayed only when you select the
Detailed Rules option from the
Action drop-down list.
Name
Select one of the following options from the
drop-down list:
•
Allow socket access —Allows the user to
access the resource.
• Deny socket access —Denies the user to
access the resource.
Specifies the action you want to
perform if the user request
matches a resource in the resource
list (optional). Action
Specify any one of the following:
• The same or a partial list of the resources
specified on the General tab.
• A specific path or file on the server(s)
specified on the General tab, using
wildcards when appropriate.
• A file type, preceded by a path if
appropriate or just specify
*/*.file_extension to indicate files with the
specified extension within any path on the
server(s) specified on the General tab.
Specifies the resource to which
detailed rule applies. New
Resources
145 Copyright © 2010, Juniper Networks, Inc.
Chapter 10: Configuring Secure Access Resource Policies