Juniper NETWORK AND SECURITY MANAGER, Manual

Page: 258 / 340

Configuring the Remote Integrity Measurement Verifier Server (NSM Procedure)
The Trusted Network Connect (TNC) standard enables the enforcement of security
requirements for endpoints connecting to networks. The client-side components of the
TNC are the IMCs and the TNC-client (TNCC). The TNCC compiles the IMC measurements
and sends them to the server. At the server, there is a corresponding set of components:
the TNC-server (TNCS) and the IMVs. The TNCS manages the messages between the
IMVs and the IMCs and sends the recommendations, based on the IMVs, to the policy
engine.
To configure the remote IMV server so that the Secure Access device can communicate
with it:
1.
In the NSM navigation tree, select Device Manager > Devices .
2.
Click the Device Tree tab, and then double-click the Secure Access device for which
you want to configure the remote IMV server.
3.
Click the Configuration tab. In the configuration tree, select Authentication > Endpoint
Security > Host Checker .
4.
Add or modify settings as specified in Table 66 on page 240.
5.
Click one:
•
OK —Saves the changes.
•
Cancel —Cancels the modifications.
Table 66: Configuring the Remote IMV Server Details
Your Action Function Option
Remote IMV > Remote IMV Servers
Enter the name for the remote IMV
server. Specifies the name for the server. Name
Enter a brief description about the
server. Describes about the server. Description
Enter either the IP address or
hostname as defined in the server
certificate. Specifies the hostname. Host
Enter a unique port number.
NOTE: Ensure that no other service is
using this port number. The default
port number is the same as the default
https port number.
Specifies the port number that the
Secure Access device uses to
communicate with the remote IMV
server. Port
Enter the same shared secret used in
the client information entry on the
remote IMV server. Specifies the shared secret
information. Shared secret
Copyright © 2010, Juniper Networks, Inc. 240
Configuring Secure Access Devices Guide