Juniper NETWORK AND SECURITY MANAGER, Руководство пользователя

Страница: 272 / 340

Configuring Cache Cleaner Restrictions (NSM Procedure)
You can restrict Secure Access device and resource access by requiring Cache Cleaner
in the following options:
•
Realm authentication policy —When users try to sign in to the Secure Access device,
the Secure Access device evaluates the specified realm’s authentication policy to
determine if the preauthentication requirements include Cache Cleaner. You can
configure a realm authentication policy to download Cache Cleaner, download and
start running Cache Cleaner, or not require Cache Cleaner. The user must sign in using
a computer that adheres to the Cache Cleaner requirements specified for the realm.
If the user’s computer does not meet the requirements, then the user is denied access
to the Secure Access device.
•
Role —When the Secure Access device determines the list of eligible roles to which it
can map an administrator or user, it evaluates each role’s restrictions to determine if
the role requires Cache Cleaner to run on the user's workstation. If it does and the user's
machine is not already running Cache Cleaner, then the Secure Access device does
not map the user to that role.
•
Resource policy —When a user requests a resource, the Secure Access device evaluates
the resource policy’s detailed rules to determine whether or not Cache Cleaner needs
to be installed or running on the user's workstation. The Secure Access device denies
access to the resource if the user's machine does not meet the Cache Cleaner
requirement.
•
To configure Cache Cleaner restrictions at the realm level:
1.
In the navigation tree, select Device Manager > Devices .
2.
Click the Device Tree tab, and then double-click the Secure Access device for which
you want to configure global Cache Cleaner restrictions in realm level.
3.
Click the Configuration tab and select Users > User Realms > Select Realm >
Authentication Policies > Cache Cleaner . The corresponding workspace appears.
4.
Configure the cache cleaner restrictions at the role level using the settings described
in Table 71 on page 254.
5.
Click one:
•
OK —Saves the changes.
• Cancel —Cancels the modifications.
Table 71: Configuring Cache Cleaner Restrictions Details at Realm Level
Your Action Function Option
Files and Folders
Copyright © 2010, Juniper Networks, Inc. 254
Configuring Secure Access Devices Guide