Configuring Host Enforcer Policies; Configuring Infranet Controller Host Enforcer Policies (Nsm Procedure) - Juniper NETWORK AND SECURITY MANAGER 2010.4 - CONFIGURING INFRANET CONTROLLER GUIDE REV 01 Manual

CHAPTER 11

Configuring Host Enforcer Policies

Configuring Infranet Controller Host Enforcer Policies (NSM Procedure)

Copyright © 2010, Juniper Networks, Inc.
Configuring Infranet Controller Host Enforcer Policies (NSM Procedure) on page 105
Host Enforcer is a stateful packet filter that is built into the Odyssey Access Client. You
configure Host Enforcer policies on the Infranet Controller.
To configure a Host Enforcer policy:
In the NSM navigation tree, select Device Manager> Devices.
1.
Click the Device Tree tab, and then double-click the Infranet Controller for which you
2.
want to configure a Host Enforcer policy.
Click the Configuration tab. In the configuration tree, select UAC > Host Enforcer.
3.
Add or modify Host Enforcer policy settings as specified in Table 32 on page 105. Table
4.
33 on page 106 gives examples of specifying for a Host Enforcer policy.
Click one:
5.
OK—Saves the changes.
Cancel—Cancels the modifications.
Table 32: Host Enforcer Policy Configuration Details
Option
Name
Description
collection-of-resources
Function
Specifies the Host Enforcer
policy name.
Describes the Host
Enforcer policy.
Specifies the traffic you
want to allow or deny on
the endpoints.
Your Action
Enter a name for the Host Enforcer
policy.
Enter a brief description for the Host
Enforcer policy.
Click collection-of-resources and add
or modify resources, one rule per line
using the following syntax:
[<protocol>'://']<host>['/'<net-mask>]':'
<DestinationPorts>[{{':'<SourcePorts>]
105