Juniper NETWORK AND SECURITY MANAGER, Manual

Page: 273 / 340

Table 71: Configuring Cache Cleaner Restrictions Details at Realm
Level
(continued)
Your Action Function Option
Select one of the following options from the drop–down list:
• Disable Cache Cleaner —Does not require Cache Cleaner to
be installed or running for the user to meet the access
requirement.
• Just load Cache Cleaner (Loads after IVE maps the user to
a realm)
—Does not require Cache Cleaner to be running for
the user to meet the access requirement but ensures that it
is available for future use. If you choose this option for a
realm’s authentication policy, then the Secure Access device
downloads Cache Cleaner to the client machine after the
user is authenticated and before the user is mapped to any
roles on the system.
• Load and enforce Cache Cleaner (Loads before IVE maps
the user to a realm)
—Requires the Secure Access device to
download and run Cache Cleaner for the user to meet the
access requirement. If you choose this option for a realm’s
authentication policy, then the Secure Access device
downloads Cache Cleaner to the client machine before the
user may access the Secure Access device sign-in page.
Specifies whether
or not Cache
Cleaner is running
for the user to
meet the access
requirement. Cache
Cleaner
option
To configure cache cleaner restrictions at the role level:
1.
In the navigation tree, select Device Manager > Devices .
2.
Click the Device Tree tab, and then double-click the Secure Access device for which
you want to configure global Cache Cleaner restrictions at the role level.
3.
Click the Configuration tab and select Users > User Roles > Select Role > General
> Restrictions > Cache Cleaner Restrictions . The corresponding workspace appears.
4.
Configure the Cache Cleaner restrictions at the role level using the settings described
in Table 72 on page 255.
5.
Click one:
•
OK —Saves the changes.
• Cancel —Cancels the modifications.
Table 72: Configuring Cache Cleaner Restriction Details at role level
Your Action Function Option
Select the Require Cache Cleaner
(must be loader by the Realm)
check box to enable this option.
Specifies Cache Cleaner to be
running in order for the user to
meet the access requirement. Require Cache Cleaner
(must be loaded by the
Realm)
To configure Cache Cleaner restrictions at the resource policy level:
1.
In the navigation tree, select Device Manager > Devices .
2.
Click the Device Tree tab, and then double-click the Secure Access device for which
you want to configure global Cache Cleaner restrictions at the resource policy level.
255 Copyright © 2010, Juniper Networks, Inc.
Chapter 16: Configuring Secure Access Cache Cleaner