Configuring If-Map Session Export Policy On The Infranet Controller; Procedure) - Juniper NETWORK AND SECURITY MANAGER 2010.4 - CONFIGURING INFRANET CONTROLLER GUIDE REV 01 Manual

Related
Documentation
Configuring IF-MAP Session Export Policy on the Infranet Controller (NSM Procedure)
Copyright © 2010, Juniper Networks, Inc.
Type the server URL for the IF-MAP Web service on the IF-MAP server. For a Juniper
5.
IF-MAP server, use:
https://<FQDN>/dana-ws/soap/dsifmap
FQDN is the fully qualified domain name of the replica's internal or external interface;
for a cluster, the FQDN of the internal or external VIP should be used.
Under Authentication Type, select the Client Authentication Method: Basic or
6.
Certificate.
If you select Basic, enter a username and password. The same information should
be added to the IF-MAP server.
If you select Certificate, select the device certificate to use.
Ensure that the certificate of the CA that signed the IF-MAP server certificate is
added from the System > Configuration > Certificates > Trusted Server CAs page.
The IF-MAP client validates the IF-MAP server certificate: if validation fails, the
connection fails. Ensure that the hostname in the IF-MAP URL on the client machine
matches the hostname of the server certificate on the IF-MAP server, and that the
CA that signed the server certificate is configured as a trusted server CA on the
IF-MAP client.
Click OK to save the changes.
7.
Configuring IF-MAP Server Settings on the Infranet Controller (NSM Procedure) on
page 107
Configuring IF-MAP Session Export Policy on the Infranet Controller (NSM Procedure)
on page 109
Configuring IF-MAP Session Import Policy on the Infranet Controller (NSM Procedure)
on page 112
Configuring IF-MAP Server Replicas (NSM Procedure) on page 114
Session-export policies determine how users are identified on the IF-MAP server when
their session is published through IF-MAP. The session-export policy sets the IF-MAP
identity.
To configure a session-export policy:
In the NSM navigation tree, select Device Manager > Devices.
1.
Click the Device Tree tab, and then double-click the Infranet Controller for which you
2.
want to configure a session-export policy.
Click the Configuration tab. In the configuration tree, select System > IF–MAP
3.
Federation > Session-Export Policies.
Chapter 12: Configuring IF-MAP Federation Settings
109