Juniper NETWORK AND SECURITY MANAGER, Manual

Page: 166 / 340

Table 35: Configuring Telnet and Secure Shell Resource Policy
Details
(continued)
Your Action Function Option
Select one of the following options from
the drop-down list:
• Allow —Allows the user to access the
resource.
• Deny —Denies the user to access the
resource.
Specifies the action you want to
perform if the user request matches
a resource in the Resource list
(optional). Action
Specify one of the following options:
• The same or a partial list of the
resources specified on the General tab.
•
A specific path or file on the server(s)
specified on the General tab, using
wildcards when appropriate.
• A file type, preceded by a path if
appropriate or just specify
*/*.file_extension to indicate files with
the specified extension within any path
on the server(s) specified on the General
tab.
Specifies the resource to which the
detailed rule applies. New
Resources
Specify one of the following options:
•
Boolean expressions: Using system
variables, write one or more Boolean
expressions using the NOT, OR, or AND
operators.
• Custom expressions: Using the custom
expression syntax, write one or more
custom expressions.
Specifies one or more expressions to
evaluate to perform the action. Conditions
Options tab
Select Options > IP based matching for
Hostname based policy resources to
enable this feature.
Allows the Secure Access device to
look up the IP address corresponding
to each hostname specified in a
Telnet/SSH resource policy. When a
user tries to access a server by
specifying an IP address rather than
the hostname, the Secure Access
device compares the IP to its cached
list of IP addresses to determine if a
hostname matches an IP address. If
there is a match, then the Secure
Access device accepts the match as
a policy match and applies the action
specified for the resource policy. IP based
matching for
Hostname
based policy
resources
Related
Documentation
Configuring a Terminal Service Resource Policy (NSM Procedure) on page 149
•
•
Configuring Web Rewriting Resource Policies (NSM Procedure) on page 151
Copyright © 2010, Juniper Networks, Inc. 148
Configuring Secure Access Devices Guide