Juniper NETWORK AND SECURITY MANAGER, Manual

Page: 170 / 340

NOTE: The Role Selections tab is enabled only when you select the
Selected or the Except those selected option from the Applies to roles
drop-down list.
7.
Enter the name, and specify the resources for the detailed rules.
NOTE: The Detailed Rules tab is enabled only when you select the Detailed
Rules option from the Action drop-down list.
NOTE: To apply detailed rules to the roles, see Step 4.
8.
Specify one or more expressions in the Conditions box to evaluate to perform the
action.
9.
Add or modify more settings as specified in Table 37 on page 152.
10.
Click one:
• OK —Saves the changes.
• Cancel —Cancels the modifications.
Table 37: Configuring Web Rewriting Resource Policy Details
Your Action Function Option
SSO From POST > General tab
Enter the URL, for example:
http://yourcompany.com/login.cgi.
NOTE: The Secure Access device
does not accept wildcard characters
in this field.
Specifies the absolute URL where
the application posts the user’s
credentials. such as:
http://yourcompany.com/login.cgi. POST URL
Select the Deny direct login for this
resource to enable this feature.
Allows users to not access the URL
directly. Deny direct login
for this resource
Select the Allow multiple POSTs to
this resource to enable this feature.
Allows Secure Access device to send
POST and cookie values to the
resource multiple times if required. Allow multiple
POSTs to this
resource
POST Variables > Label
Enter the label name.
NOTE: This field is required if you
either enable or require users to
modify data to post to back-end
applications.
Specifies the label that appears on
a user’s preferences page in the
Secure Access device. Label
Copyright © 2010, Juniper Networks, Inc. 152
Configuring Secure Access Devices Guide