Juniper NETWORK AND SECURITY MANAGER, Manual

Page: 169 / 340

Table 36: Configuring Terminal Service Resource Policy
Details
(continued)
Your Action Function Option
Select Options > IP based matching for
Hostname based policy resources to
enable this feature.
The Secure Access device
compares the IP to its cached list
of IP addresses to determine if a
hostname matches an IP address.
If there is a match, then the Secure
Access device accepts the match
as a policy match and applies the
action specified for the resource
policy. IP based
matching for
Hostname
based policy
resources
Related
Documentation
Configuring Web Rewriting Resource Policies (NSM Procedure) on page 151
•
•
Configuring a Secure Access ACE Server Instance (NSM Procedure) on page 161
Configuring Web Rewriting Resource Policies (NSM Procedure)
Web access resource policies control which Web resources users can access in order to
connect to the Internet, intranet, or extranet. You can deny or allow access to Web
resources by URL or IP address range. For URLs, you can use the “*” and “?” wildcards
to efficiently specify multiple hostnames and paths. For resources that you specify by
hostname, you can also choose either HTTP, HTTPS, or both protocols.
To configure Web rewriting resource policy:
1.
In the navigation tree, select Device Manager > Devices . Click the Device Tree tab,
and then double-click the Secure Access device for which you want to configure a
Web rewriting resource policy.
2.
Click the Configuration tab. Select Users > Resource Policies > Web .
3.
Select a policy that you want to configure, and then enter the name, the description,
and the resources for the policy.
4.
In the Applies to roles list, select one:
• All —Applies the policy to all users.
•
Selected —Applies the policy only to users who are mapped to roles in the Role
Selection section.
•
Except those selected —Applies this policy to all users except for those who map
to the roles in the role selection section.
5.
In the Action or the Authentication Type list, select any option from the drop-down
list for the policy.
6.
Select the role, and click Add to move the roles from the Non-members to Members
list.
151 Copyright © 2010, Juniper Networks, Inc.
Chapter 10: Configuring Secure Access Resource Policies