Juniper NETWORK AND SECURITY MANAGER, Manual

Page: 56 / 340

Table 8: Global User Role Configuration Details (continued)
Your Action Function Option
Global Role Options > Global Terminal Services Role Options tab
Enter the file name. Specifies the custom Citrix client file
name. Citrix Client CAB File
Name
Enter the version. Specifies the custom Citrix version. Citrix Client CAB File
Version
Related
Documentation
Creating Secure Access Role-Based Source IP Alias (NSM Procedure) on page 38
•
•
Configuring Secure Access General Session Options (NSM Procedure) on page 39
•
Creating and Applying a Secure Access Device Template on page 29
•
Verifying Imported Device Configurations on page 19
Creating Secure Access Role-Based Source IP Alias (NSM Procedure)
To direct traffic to specific sites based on roles, you can define a source IP alias for each
role. You use these aliases to configure virtual ports you define for the internal interface
source IP address. A back-end device can then direct end-user traffic based on these
aliases, as long as you configure the back-end device, such as a firewall, to expect the
aliases in place of the internal interface source IP address. This capability enables you
to direct various end users to defined sites based on their roles, even though all of the
end-user traffic has the same internal interface source IP address.
NOTE: You must define virtual ports to take advantage of the role-based
source IP aliases.
To specify a source IP alias for the role:
1.
In the NSM navigation tree, select Device Manager > Devices . Click the Device Tree
tab, and then double-click the Secure Access device for which you want to configure
user roles.
2.
Click the Configuration tab, and select Users > User Roles . The corresponding
workspace appears.
3.
Click the New button and the New dialog box appears.
4.
Add or modify settings on the General > VLAN/Source IP as specified in Table 9 on
page 39.
5.
Click one:
• OK —Saves the changes.
•
Cancel —Cancels the modifications.
Copyright © 2010, Juniper Networks, Inc. 38
Configuring Secure Access Devices Guide