Juniper NETWORK AND SECURITY MANAGER 2010.4 - CONFIGURING INFRANET CONTROLLER GUIDE REV 01 Manual page 112

NSM Infranet Controller Configuration Guide
94
Table 27: Resource Access Policies Configuration Details (continued)
Option
Description
Resources
Applies to roles
Action
Function Your Action
Describes the resource Enter a brief description for the
access policy. resource access policy.
Specifies the protocol, IP Enter the protocol, IP address,
address, network mask, network mask, and port of each
and port of each resource resource (or range of addresses) for
for which this Infranet which this Infranet Enforcer resource
Enforcer resource access access policy applies, one per line. Do
policy applies. not insert any spaces in your entries.
If you insert spaces, the policy may
not be applied correctly.
Specifies the roles to
which this policy is
applicable.
NOTE: Select the policies from the
Non-members list and click Add to
move it to the Members list before
applying the policies to the roles.
Specifies whether this
Infranet Enforcer resource
access policy should allow
or deny access to the
specified resources.
NOTE: If you choose to deny access,
a text box appears that allows you to
customize the message for users.
If you want to record deny actions in
the User Access Log, select the
Enforcer Deny Messages check box
on the Log/monitoring > User Access
> Settings page. The log records the
user, source IP, destination IP,
protocol, and destination port.
Select Policy applies to ALL roles
to apply this Infranet Enforcer
resource access policy to all users.
Select Policy applies to SELECTED
roles to apply this Infranet Enforcer
resource access policy only to users
who are mapped to roles in the
Selected roles list.
Select Policy applies to all roles
OTHER THAN those selected to
apply this Infranet Enforcer
resource access policy to all users
except those who map to the roles
in the Selected roles list.
Select Allow access to allow
access to the specified resources.
Select Deny access to deny access
to the specified resources.
Copyright © 2010, Juniper Networks, Inc.