Juniper NETWORK AND SECURITY MANAGER, Manual

Page: 306 / 340

Table 84: IF–MAP Session-Export Policy Configuration Details (continued)
Your Action Function Option
Select this action and the following options
appear.
• Copy Host Checker policy names —Select this
option to copy the name of each Host Checker
policy that passed for the session to a device
attribute.
• Set device attributes specified below —Select
this option to set the specified device
attributes. The Device Attributes option
appears. From Device Attributes, click
New and
enter a specified device attribute.
Specifies a passed Host
Checker policy on the
Infranet Controller or SA
appliance. Set IF-MAP
Device
Attributes
Related
Documentation
Configuring IF-MAP Client Settings on the Secure Access Device (NSM Procedure) on
page 284
•
•
Configuring IF-MAP Session Import Policy on the Secure Access Device (NSM
Procedure) on page 288
Configuring IF-MAP Session Import Policy on the Secure Access Device (NSM
Procedure)
The session-export policies that you create allow IF-MAP data that represents a session
to be stored on the IF-MAP server. Session-import policies specify how the Secure Access
device derives a set of roles and a username from the IF-MAP data in the IF-MAP server.
Session-import policies establish rules for importing user sessions from a different Infranet
Controller or SA appliance. Import policies allow you to match authenticated users with
corresponding roles on the target device. For example, you might configure an import
policy to specify that when IF-MAP data for a session includes the “Contractor” capability,
the imported session should have the “limited” role. Session-import policies allow the
device to properly assign roles based on information that the IF-MAP server provides.
To configure a session-import policy:
1.
In the NSM navigation tree, select Device Manager > Devices . Click the Device Tree
tab, and then double-click the Secure Access device for which you want to configure
a session-import policy.
2.
Click the Configuration tab. In the configuration tree, select System > IF–MAP
Federation > Session-Import Policies .
3.
Add or modify settings as specified in Table 85 on page 289.
4.
Click one:
• OK —Saves the changes.
• Cancel —Cancels the modifications.
Copyright © 2010, Juniper Networks, Inc. 288
Configuring Secure Access Devices Guide