Assigning A Policy To Multiple Protected Resources - Novell ACCESS MANAGER 3.1 SP2 - ACCESS GATEWAY GUIDE 2010 Manual

The user first logs in to PR2 and is active for 10 minutes. The shared1 time line gets updated with
this activity. When the user requests access to PR1, the user is granted access without being
prompted for credentials. The user is then active on PR1 for over 20 minutes. When the user
requests access to PR2, even though the user has been inactive on this resource for over 20 minutes,
the user is granted access because the time line shows activity within the last five minutes.
With this configuration, PR2 does not time out as long as the user remains active on PR1. However,
when the user goes inactive on both PR2 and PR1 for over 15 minutes and the user requests access
to PR1, the time line shows no activity within the time limit specified for PR2 and the user is
prompted to log in.
Scenario 4: Novell does not recommend that you set different authentication timeouts on contracts
and then use the Any contract option for protected resources. If you want to use the Any contract,
then you should set the authentication timeout to the same value on all contracts. If the timeouts are
not the same, you cannot consistently predict what timeouts are being applied to the various
protected resources. For example, the user requests access to a resource that is protected with a
contract with a short timeout. The user logs in, then accesses resources that use the Any contract
option. All of these resources are assigned a short timeout.The user then goes inactive and the
session times out. The user then requests access to a resource with a contract with a long timeout.
The user logs in, and after a few minutes, accesses same resources protected with the Any contract
option. These resources are now assigned the long timeout value.

1.3.7 Assigning a Policy to Multiple Protected Resources

If you have created multiple protected resources that need to be protected by the same policy or
policies, you can use the policy view to assign a policy to multiple protected resources. However,
the protected resources must belong to the same proxy service.
1 In the Administration Console, click Devices > Access Gateways > Edit > [Reverse Proxy
Name] > [Name of Proxy Service] > Protected Resources.
2 Select the Policy View.
Configuring the Access Gateway to Protect Web Resources 37