Juniper NETWORK AND SECURITY MANAGER, Manual

Page: 59 / 340

Table 10: Session Options Configuration details (continued)
Your Action Function Option
Select Enable session timeout
warning to notify
nonadministrative users when
they are about to reach a
session or idle timeout limit.
Enables users to take the
appropriate action when they
are close to exceeding their
session limits or idle timeouts,
helping them to save any
in-progress form data that
would otherwise be lost. Users
approaching the idle timeout
limit are prompted to
reactivate their session. Users
approaching the session time
limit are prompted to save
data. Enable session timeout
warning
Select Display sign-in page on
max session time out .
Displays a new browser sign-in
page to the end user when
their session times out.
This option appears only when
you select
Enable session
timeout warning .
Display sign-in page on max
session time out
Select a roaming session
option from the drop-down list:
• Enabled —Enables roaming
user sessions for users
mapped to this role.
• Limit to subnet —Limits the
roaming session to the local
subnet specified in the
Netmask box.
• Disabled— Disables roaming
user sessions for users
mapped to this role.
Allows users to enable, limit,
or disable the roaming session.
A roaming user session works
across source IP addresses,
which allows mobile users
(laptop users) with dynamic
IP addresses to sign in to the
Secure Access device from
one location and continue
working from another. Disable
this feature to prevent users
from accessing a previously
established session from a
new source IP address. This
helps protect against an
attack spoofing a user’s
session, provided the hacker
was able to obtain a valid
user's session cookie.
Users may sign in from one IP
address and continue using
their sessions with another IP
address as long as the new IP
address is within the same
subnet.
Users who sign in from one IP
address may not continue an
active Secure Access device
session from another IP
address; user sessions are tied
to the initial source IP address.
Roaming session
41 Copyright © 2010, Juniper Networks, Inc.
Chapter 6: Configuring User Roles and Administrator Roles