Juniper NETWORK AND SECURITY MANAGER, Manual

Page: 281 / 340

Table 76: Configuring Global Security Details (continued)
Your Action Function Option
Select the AES Medium (between
128-bit and 168-bit) check box to
enable this feature.
Allows the Secure Access device to
use 168-bit or higher ciphers for
backend rewriter connections and the
device to provide preference to
256-bit AES encryption for backend
mail proxy SSL connections.
NOTE: This option is displayed only
when you select
Custom SSL Cipher
Selection from the strength
drop–down list.
AES Medium
(between
128-bit and
168-bit)
Select the RC4 Medium (between
128-bit and 168-bit) check box to
enable this feature.
Allows Secure Access device to use
168-bit or higher ciphers for backend
rewriter connections and the device
provides preference to 256-bit AES
encryption for backend mail proxy SSL
connections.
NOTE: This option is displayed only
when you select
Custom SSL Cipher
Selection from the strength
drop–down list.
RC4 Medium
(between
128-bit and
168-bit)
Select the RC2 Medium (between
128-bit and 168-bit) check box to
enable this feature.
Allows Secure Access device to use
168-bit or higher ciphers for backend
rewriter connections and device gives
preference to 256-bit AES encryption
for backend mail proxy SSL
connections.
NOTE: This option is displayed only
when you select
Custom SSL Cipher
Selection from the strength
drop–down list.
RC2 Medium
(between
128-bit and
168-bit)
Select the DES Low (less than
128-bit) check box to enable this
feature.
Allows Secure Access device to use
168-bit or higher ciphers for backend
rewriter connections and the device
provides preference to 256-bit AES
encryption for backend mail proxy SSL
connections.
NOTE: This option is displayed only
when you select
Custom SSL Cipher
Selection from the strength drop–
down list.
DES Low (less
than 128-bit)
Select the Do not allow connections
from browsers that only accept
weaker ciphers
check box to enable
this feature.
Prevents a browser with a weak cipher
from establishing a connection. Do not allow
connections
from browsers
that only
accept weaker
ciphers
Settings
263 Copyright © 2010, Juniper Networks, Inc.
Chapter 17: Configuring Secure Access System Management Features