Juniper NETWORK AND SECURITY MANAGER, Manual

Page: 202 / 340

Table 45: Secure Access eTrust SiteMinder Advanced Configuration
Details
(continued)
Your Action Function Option
Siteminder Settings > Advanced tab
Enter a value. The value entered in this field
must match the authentication
port value entered through the
Policy Server Management
Console. By default, this field
matches the policy server’s
default setting of 44442. Authentication Port
Enter a value. The value entered in this field
must match the authorization
port value entered through the
Policy Server Management
Console. By default, this field
matches the policy server’s
default setting of 44443. Authorization Port
Related
Documentation
Configuring a Secure Access Certificate Server Instance (NSM Procedure) on page 184
•
•
Configuring a Secure Access SAML Server Instance (NSM Procedure) on page 188
•
Configuring a Secure Access Anonymous Server Instance (NSM Procedure) on page 174
Configuring a Secure Access Certificate Server Instance (NSM Procedure)
The certificate server feature allows users to authenticate based on attributes contained
in client-side certificates. You may use the certificate server by itself or in conjunction
with another server to authenticate users and map them to roles.
To configure certificate server instance:
1.
In the NSM navigation tree, select Device Manager > Devices . Click the Device Tree
tab, and then double-click the Secure Access device for which you want to configure
user roles.
2.
Click the Configuration tab, and then select System > Configuration > Certificates
> Trusted Client CAs tab to import the CA certificate used to sign the client-side
certificates. The corresponding workspace appears.
3.
Select Authentication > Auth Servers .
4.
Click the New button. The New dialog box appears.
NOTE: If you want to update an existing server instance, click the
appropriate link in the Auth Server Name box, and perform the Steps 5
through 8.
5.
Specify a name to identify the server instance.
Copyright © 2010, Juniper Networks, Inc. 184
Configuring Secure Access Devices Guide