Juniper NETWORK AND SECURITY MANAGER, Manual

Page: 210 / 340

Table 49: Active Directory or NT Domain Instance Configuration
Details
(continued)
Your Action Function Option
Select AD/NT Settings >
General >Kerberos (most
secure)
to enable this feature.
Allows the Secure Access device to
send user credentials to Kerberos. Kerberos (most
secure)
Select AD/NT Settings >
General >NTLMV2 (moderately
secure)
to enable this feature.
Allows the Secure Access device to
send user credentials to NTLMv2. NTLMV2
(moderately secure)
Select AD/NT Settings >
General >NTLMV1 (least
secure)
to enable this feature.
Allows the Secure Access device to
send user credentials to NTLMv1. NTLMV1 (least
secure)
Select AD/NT Settings >
General >Specify Kerberos
realm name
to enable this
feature.
Allows the Secure Access device to
retrieve the Kerberos realm name from
the Active Directory server using the
specified administrator credentials. Use LDAP to get
Kerberos realm
name
Enter the name. Specifies Kerberos realm name. Specify Kerberos
realm name
AD/NT Settings > Advanced tab
Select AD/NT Settings >
Advanced > User may belong
to Domain Local Groups across
trust boundaries
to enable this
feature.
Specifies that the selected user
belongs to the Domain Local Groups
who honor trust relationships in the
Active Directory. User may belong to
Domain Local
Groups across trust
boundaries
Enter the computer name. Specifies the name that the Secure
Access device uses to join the specified
Active Directory domain as a computer. Container Name
Server Catalog > Expressions tab
Enter a name. Specifies a name for the user
expression in the Active Directory or NT
domain server user directory. Name
Enter a value. Specifies a value for the user
expression in the Active Directory or NT
Domain server user directory. Value
Server Catalog > Groups tab
Enter a name. Specifies the name of the group Name
Enter a name. Specifies the admin’s domain local
groups information. Groups
Enter a name. Specifies the group that contains the
administrators to enable centralized
administration in an Active Directory
domain. AD Group
Copyright © 2010, Juniper Networks, Inc. 192
Configuring Secure Access Devices Guide